Podcast · Tech & Science

The ITSM Practice: Elevating ITSM and IT Security Knowledge

by Luigi Ferri · English · Tech & Science

Join Luigi Ferri, an experienced ITSM & IT Security Professional, in 'The ITSM Practice.' Explore IT Service Management and IT Security, uncovering innovations and best practices with insights from leading organizations like Volkswagen Financial Services, Vodafone, and more. Each episode offers prac

New episodes: Weekly
Typical length: 10 min
Latest: 13 Oct 2026
Language: English

Latest episode

13 Oct 2026 · 14 minNew

Your SOC Stops at the Firewall. Should It? - Part 2

What happens when a cyber-physical threat crosses Cybersecurity, Physical Security, Facilities and IT Operations? This episode explores how SOC teams can correlate signals, establish incident ownership, define escalation thresholds and build a unified operating model to protect critical infrastructure and business services. In this episode, we answer to: If Physical Security sees one part of an attack and the SOC sees another, who sees the whole threat? When multiple departments are involved in the same security event, who owns 100% of the incident and its outcome? How should organizations…

Play episodeWhatsApp Download

Earlier episodes 29 most recent

S3 · E31 · 6 Oct 2026 · 7 min
Your SOC Stops at the Firewall. Should It? - Part 1
Does your SOC really protect the entire business, or does its visibility stop at the firewall? In this episode of The ITSM Practice Podcast, Luigi Ferri explores drone threats against data centers and what they reveal about gaps between Cybersecurity, Physical Security, Facilities, IT Operations and Business Continuity. Discover why CISOs need to rethink the traditional cyber attack surface and focus on protecting the complete service. In this episode, we answer to: Where should the SOC security perimeter really end? How can CISOs identify the true attack surface of a critical business…
S3 · E30 · 29 Sep 2026 · 15 min
ITIL 5: The 6C Model for AI
AI that summarizes an incident is one thing. AI that disables accounts, isolates endpoints and blocks connections is another. In this episode of The ITSM Practice Podcast, Luigi Ferri explains the ITIL 5 6C Model for AI and why CIOs, CISOs and MSPs need to stop asking, “Are we using AI?” and start asking, “What are we allowing AI to do?” In this episode, we answer to: What is the ITIL 5 6C Model for AI? How much authority should MSPs give AI to decide and act? Who is accountable when autonomous AI gets a decision wrong? Resources Mentioned in this Episode: ITIL website, article "AI…
S3 · E29 · 22 Sep 2026 · 20 min
Should Your CMDB Know Your Business Risk?
A critical vulnerability is not automatically a critical business risk. If your CMDB only tells you which server is affected but not the customer, service, contract, SLA, or revenue behind it, you are missing the information that matters. This episode explains why CISOs need a business-aware CMDB to connect technical risk with real business impact. In this episode, we answer to: Can your CMDB tell the CISO what a security incident actually means for the business? How do you prioritize vulnerabilities based on customers, SLAs, contracts, and revenue at risk? Why is connecting CMDB, ITSM, CRM,…
S3 · E28 · 15 Sep 2026 · 14 min
Is Your Security Stack Too Big?
Is your security stack actually protecting you, or are you just paying for too many tools? This episode looks at security tool sprawl, unused capabilities, overlapping products, skills gaps and vendor dependency. Before buying another security product, understand what you already have, what your team can actually operate and what would really happen if you switched a tool off. In this episode, we answer to: Are you paying for security tools you do not actually need? Is your team using the security capabilities you already pay for? Should you consolidate security tools or invest in specialist…
S3 · E27 · 8 Sep 2026 · 12 min
24/7 IT Support: Why Coverage Is Not Capability
24/7 support does not automatically mean 24/7 capability. In this episode of The ITSM Practice Podcast, Luigi Ferri explores how MSPs can design profitable 24/7 IT support using follow-the-sun models, AI, automation, Level Zero support, intelligent routing, and service tiers, while protecting engineering capacity, customer experience, SLAs, and margins. In this episode, we answer to: How can MSPs deliver effective 24/7 IT support without replicating expensive engineering capability across every time zone? How can AI, automation, and Level Zero improve incident management, troubleshooting,…
S3 · E26 · 1 Sep 2026 · 11 min
The Last Human-Only Leadership Generation: How AI Is Transforming the Workforce
AI is no longer just a technology tool, it is becoming part of the workforce. In this episode, Luigi Ferri explores why AI represents a workforce transformation rather than a technology project, and how CIOs, CISOs, and business leaders must rethink governance, digital workers, AI leadership, cybersecurity, and Enterprise Service Management to successfully manage hybrid human-AI teams. In this episode, we answer to: Why is AI a workforce transformation rather than just another technology implementation? How should CIOs and CISOs govern and manage digital workers alongside human employees?…
S3 · E25 · 25 Aug 2026 · 9 min
ENISA Cyber Exercises: Why Testing Cybersecurity Isn't Enough
Are cyber exercises actually improving your cybersecurity resilience, or just satisfying compliance requirements? In this episode, Luigi Ferri explores ENISA's cyber exercise methodology, the gap between testing and real capability improvement, the role of MSPs in incident response, and why organizations must focus on measurable cyber resilience instead of annual audit-driven exercises. In this episode, we answer to: Why are cyber exercises important for improving cybersecurity resilience rather than just meeting compliance? What is the difference between testing cybersecurity and improving…
S3 · E24 · 18 Aug 2026 · 11 min
Projects Deliver Outputs. Services Deliver Outcomes.
Projects Deliver Outputs, Services Deliver Outcomes: The Ownership Crisis Nobody Discusses. Discover why the biggest risk in any IT project begins after go-live. In this episode, Luigi Ferri explores the critical difference between project outputs and service outcomes, why Service Ownership is essential for long-term business value, and how IT Service Management (ITSM), Product Management, and Business Capability Management must work together to drive sustainable success. Learn why organizations have an ownership problem. In this episode, we answer to: Why is the day after go-live often the…
S3 · E23 · 11 Aug 2026 · 17 min
MSPs: Your AI Contracts Are Obsolete
AI is transforming Managed Service Providers (MSPs) from managing technology to managing AI behavior. This episode explains why traditional service design, governance, contracts, and risk models are no longer sufficient for AI-enabled services. Learn how AI impacts ITIL service management, AI governance, MSP liability, ISO 42001, NIST AI RMF, the EU AI Act, and why AI ownership, accountability, and updated contracts are now business-critical. In this episode, we answer: How does AI change the nature of IT services and MSP service design? Why are traditional MSP contracts, governance models,…
S3 · E22 · 4 Aug 2026 · 10 min
DARE25: Why Defense Isn't Enough
Discover why traditional cybersecurity defense is no longer enough in the AI era. Luigi Ferri explores the DARE25 framework, dynamic risk management, governance, Purple Teaming, accountability, and adaptive leadership. Learn how Enterprise Service Management, IT Service Management, and cybersecurity leaders can build resilient organizations by prioritizing behavior, faster adaptation, and continuous learning. In this episode, we answer to: Why is traditional cybersecurity defense no longer enough in the age of AI? How does the DARE25 framework improve risk management, governance, and…
S3 · E21 · 28 Jul 2026 · 14 min
ISO 28000: Your Resilience, Their Budget
In this episode of the ITSM Practice Podcast, Luigi Ferri explores why supply chain resilience has become one of the biggest strategic challenges for Government Managed Service Providers (MSPs). Using practical examples from healthcare and public services, he explains how ISO 28000 shifts the conversation from protecting internal systems to managing the security and resilience of the organizations you depend on. Discover why supplier failures, inherited risk, and third-party dependencies are becoming the greatest threats to service continuity, cybersecurity, and operational resilience in…
S3 · E20 · 21 Jul 2026 · 20 min
No SBOM, No Trust
Discover why the Software Bill of Materials (SBOM) is rapidly becoming a strategic necessity for Managed Service Providers (MSPs) and enterprise IT leaders. In this episode, Luigi Ferri explains how software supply chain attacks such as Log4Shell and SolarWinds transformed SBOMs from technical documentation into essential tools for IT governance, cyber resilience, software supply chain security, and operational trust. Learn the four stages of SBOM maturity and how MSPs can strengthen transparency, improve vulnerability management, and build competitive advantage through continuous software…
S3 · E19 · 14 Jul 2026 · 7 min
PSD3: Who Owns Trust?
PSD3 is more than a compliance requirement, it's a test of organisational maturity, security leadership, accountability, and decision-making. Discover how Enterprise Service Management, IT Service Management, and cybersecurity principles help organisations balance security, customer trust, and clear ownership to build resilience beyond regulatory compliance. In this episode, we answer: How does PSD3 reveal an organisation's maturity and decision-making under pressure? When should security lead, and when should it step back to enable business ownership? Who is truly accountable for trust,…
S3 · E18 · 7 Jul 2026 · 11 min
The Hidden Cost of Untrusted Data
Why do organizations struggle to trust their operational data despite having plenty of it? In this episode of The ITSM Practice Podcast, Luigi Ferri explains the critical difference between data quality and data integrity, and why CIOs must build operational trust before launching digital transformation initiatives. Learn practical ITSM strategies to improve data governance, CMDB accuracy, operational accountability, and Enterprise Service Management. In this episode, we answer to: What is the difference between data quality and data integrity, and why does it matter for CIOs? Why do…
S3 · E16 · 30 Jun 2026 · 10 min
ITIL 5 Foundation: Exam Success
Preparing for the ITIL 5 Foundation exam? Discover why successful candidates focus on understanding the ITIL Value System, Value Chain, Governance, AI Capability, Four Dimensions, and Service Lifecycles as one connected system instead of isolated chapters. Learn smarter study strategies to improve your exam performance and master ITIL 5 concepts. In this episode, we answer to: Why is the ITIL Value System the foundation for understanding the entire ITIL 5 framework? How does AI Capability depend on governance, knowledge management, and operating models? How can you study the ITIL 5…
S3 · E17 · 23 Jun 2026 · 8 min
PSD3: Governance Before Technology
In this episode, Luigi Ferri explores why organisations often take the wrong first step when preparing for PSD3 compliance. Rather than rushing into new tools, fraud platforms, or transformation programmes, PSD3 readiness begins with observation. Learn how incident response, governance, decision authority, and organisational behaviour under uncertainty reveal the real gaps that PSD3 exposes. Discover why governance maturity and clear accountability are critical for building a resilient PSD3 strategy. In this episode, we answer to: Why is the first step towards PSD3 compliance so often the…
S3 · E14 · 16 Jun 2026 · 13 min
AI Security Strategy: Why Midmarket Organizations Get It Wrong
Why do most AI security strategies fail in the midmarket? In this episode of The ITSM Practice Podcast, we explore why successful AI security is not about buying more AI tools but about building the right foundation first. Learn how identity management, telemetry quality, governance, and operational maturity determine AI security success. We discuss AI readiness, MSSP evolution, cybersecurity automation, SOC transformation, and practical AI security roadmaps for midmarket organizations. Discover why AI augments security teams rather than replacing them and how organizations can achieve…
S3 · E14 · 9 Jun 2026 · 11 min
What DoDAF Can Teach Leaders About Architecture and Complexity
Are modern enterprises losing control of their architecture? In this episode, Luigi Ferri explores why cloud adoption, outsourcing, SaaS expansion, and fragmented governance are creating hidden dependencies and increasing operational risk. Discover how the Department of Defense Architecture Framework (DoDAF) offers valuable lessons for improving architectural visibility, governance, resilience, and enterprise-wide coordination in today's complex digital ecosystems. In this episode, we answer to: Why are modern enterprises losing architectural ownership and visibility across complex digital…
S3 · E13 · 2 Jun 2026 · 10 min
Identity Is the New Perimeter
AI is changing cybersecurity faster than most organizations can govern it. In this episode of The ITSM Practice Podcast, Luigi Ferri explores why identity has become the true enterprise perimeter. As organizations race to deploy Agentic AI, autonomous agents, cloud platforms, and APIs, many are building on identity governance models that were never designed for machine-scale decision-making. From Zero Trust Architecture and Identity & Access Management (IAM) to the lessons behind major breaches at MGM, Snowflake, and Uber, this episode examines a critical question: If enterprises struggled…
S3 · E12 · 26 May 2026 · 10 min
FINMA and ITIL 4: Building Resilient Swiss Banks
FINMA Circular 2023/1 is transforming operational resilience from a compliance exercise into a strategic leadership priority for Swiss banks. In this episode, Luigi Ferri explains why ITIL 4 is far more than ITSM, it is a powerful enterprise operating model that connects governance, cybersecurity, risk management, supplier coordination, and business continuity to build truly resilient financial institutions. In this episode, we answer to: Why is operational resilience becoming the new license to operate for banks? How does ITIL 4 support FINMA resilience and cybersecurity requirements? What…
S3 · E11 · 19 May 2026 · 6 min
Broken Transmission: Why Fintech Strategy Fails
Broken Transmission: Why Agile Fintechs Miss Strategy | In this episode of The ITSM Practice Podcast, Luigi Ferri explains why fintech strategy execution fails despite Agile delivery, strong squads, and constant releases. Learn how fragmented ownership, poor prioritization, and disconnected KPIs create operational misalignment, reducing business outcomes and authorization rate performance. In this episode, we answer to: Why do Agile fintech teams fail to execute business strategy effectively? How does fragmented ownership impact authorization rate improvement initiatives? Why do operational…
S3 · E10 · 12 May 2026 · 9 min
FINOS vs ISO 42001: What to Choose
Fintech leaders: stop defaulting to ISO 42001. Discover how FINOS empowers you to design scalable, audit-ready AI governance before regulation forces your hand. Learn to align controls, reduce risk, and build governance by design—not by pressure. In this episode, we answer to: What makes FINOS a powerful alternative to ISO 42001? How can fintechs design governance before audits hit? Why does governance fail without alignment? Resources Mentioned in this Episode: FINOS website, article "AI Strategic initiative series: Building an AI Governance Framework - Key Takeaways from the NYC Workshop",…
S3 · E17 · 5 May 2026 · 9 min
Who Owns Cloud Security?
A single question can expose a major cloud risk: who is responsible? This episode breaks down the cloud shared responsibility model, revealing how unclear ownership, misconfigurations, and weak governance lead to data breaches, and how ISO/IEC 27017 helps close the gaps. In this episode, we answer to: Who is really accountable for cloud security failures? Why do misconfigurations cause most cloud data breaches? How does ISO/IEC 27017 strengthen cloud security governance? Resources Mentioned in this Episode: ISO Standards website, standard ISO/IEC 27017:2015, link…
S3 · E16 · 28 Apr 2026 · 8 min
CISO Strategy: Where Product Security Fails at Scale
Most organisations manage only build and operate, ignoring growth, where security risk explodes. Luigi Ferri reveals how CISOs miss the most critical phase, where scaling, DevOps, and rapid decisions create hidden security debt. This episode challenges leaders to shift from reactive controls to full product lifecycle governance before risk turns into incidents. In this episode, we answer to: Why is product growth the most dangerous phase for cybersecurity risk? Are CISOs governing product lifecycle or just reacting to failures? How does DevOps accelerate delivery but weaken security…
S3 · E13 · 21 Apr 2026 · 8 min
ITIL 5 Exposed: Accountability Without Authority
ITIL 5 exposes a critical ITSM flaw: Service Owners held accountable without authority. Discover how broken governance, security vs delivery conflicts, and unclear decision rights undermine outcomes. Learn why real accountability starts before operations, and how to redesign Enterprise Service Management for true leadership. In this episode, we answer to: Why are Service Owners accountable but not empowered in ITIL 5? How does the security vs delivery tension reveal weak ITSM governance? Resources Mentioned in this Episode: PeopleCert website, article "Understanding the evolution of ITIL",…
S3 · E7 · 14 Apr 2026 · 9 min
PSD3 Explained: Payments Security & Fraud
PSD3 is reshaping payments security, moving beyond PSD2’s access model to address fraud, scams and trust abuse. This episode explains why strong authentication is no longer enough, how APIs become critical to trust, and what banks and fintechs must change to stay secure, compliant and resilient. In this episode, we answer to: What makes PSD3 fundamentally different from PSD2 in payments security? Is strong customer authentication enough to stop modern fraud? How do APIs influence trust, performance and security under PSD3? Resources Mentioned in this Episode: Stripe website, article "What…
S3 · E6 · 7 Apr 2026 · 10 min
AI Governance Illusion: Hidden Risks & Accountability in ITSM
AI governance maturity can be misleading. Many organizations rely on frameworks, policies, and dashboards that signal control but fail to reflect true understanding of AI systems. This episode explores the Governance–Understanding Gap, highlighting why unclear decision ownership and limited system insight create hidden risks in AI, ITSM, and Enterprise Service Management environments. In this episode, we answer to: What is the worst decision an AI system could realistically make in practice? Which AI system in the organization is least understood and hardest to explain? If an AI system makes…
S3 · E5 · 31 Mar 2026 · 7 min
DevSecOps: Responsibility Without Authority
DevSecOps promises shared security responsibility, but what happens when accountability shifts without decision authority? In this episode of The ITSM Practice Podcast, Luigi Ferri explores governance gaps, risk ownership, Security Champions, burnout, and structural ambiguity in DevSecOps. A sharp reflection for CISOs, AppSec leaders, and ITSM professionals navigating security governance and enterprise risk management. In this episode, we answer to: Who is explicitly allowed to accept risk in a DevSecOps operating model? What happens when developers receive security accountability without…
S3 · E4 · 24 Mar 2026 · 8 min
ISO 31000 vs MoR: Closing the Risk Management Gap
Enterprise Risk Management (ERM) often looks mature—risk registers, ISO 31000 alignment, MoR processes—yet fails to influence real decisions. In fintech and regulated environments, risk governance must shape judgment, not just document compliance. This episode explores why ISO 31000 and MoR lose impact under pressure, and how to align risk appetite, decision-making, and operational execution before risk accumulates. In this episode, we answer to: How can ISO 31000 truly influence enterprise decision-making in fast-moving fintech environments? Why does Management of Risk (MoR) become…

About The ITSM Practice: Elevating ITSM and IT Security Knowledge

The ITSM Practice: Elevating ITSM and IT Security Knowledge is a English tech & science podcast from Luigi Ferri. Melo plays each episode straight from the publisher's own feed — no ads added, no account needed — and remembers where you stopped, in this browser only.

Publisher: Luigi Ferri
Language: English
Category: Tech & Science
New episodes: Weekly
Typical length: 10 min
Latest episode: 13 Oct 2026
Feed: RSS — paste into any podcast app
Apple Podcasts: podcasts.apple.com/podcast/id1720010566
Rights: Luigi Ferri

RSS feed Apple Podcasts

More English tech & science

Take it with you

The Melo app keeps playing with the screen off, works in the car and on your watch, wakes you to your station, and browses the whole catalogue offline. Free, no ads, no account.