App Store

Google Play

Details page - Device banner - 894x1036

Step into an infinite world of stories

Listen and read

N2K Networks

CISO Perspectives explores the evolving landscape of cybersecurity leadership, talent, and risk—because success in cybersecurity is about people, not just technology. Hosted by Kim Jones, veteran CISO and educator, this podcast challenges conventional thinking on leadership, talent pipelines, and the disconnects holding the profession back. Join Kim for candid discussions with industry leaders, and insights that help you build a stronger, more resilient cyber ecosystem.

CSO Perspectives (public)

In CISO Perspectives, Kim Jones, a CISO with over four decades of real-world security and risk management experience, sits down with industry leaders throughout this series for candid conversations that share their experiences and perspectives about the cybersecurity industry and the many challenges it faces. Whether it be cybersecurity leadership, talent ecosystems, career entry points, or certifications, these conversations will help you build a stronger and more impactful cyber ecosystem within your organization.
Learn more about your ad choices. Visit megaphone.fm/adchoices

CISO Perspectives is back!

Show Notes: 
The cyber talent ecosystem faces severe indigestion, which has stifled growth and closed doors to new talent. In this episode of CISO Perspectives, host Kim Jones sits down with Ed Adams, the Head of Cybersecurity for North America at the Bureau Veritas Group, to discuss what has caused this indigestion and how leadership can better address these challenges. A key aspect of this conversation revolved around discussing Ed's book, See Yourself in Cyber: Security Careers Beyond Hacking, and how he expands the conversation surrounding traditional roles associated with cybersecurity.

Want more CISO Perspectives?:
Check out a companion blog post by our very own Ethan Cook, where he breaks down key insights, shares behind-the-scenes context, and highlights research that complements this episode. It’s the perfect follow-up if you’re curious about the cyber talent crunch and how we can reshape the ecosystem for future professionals.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Is the cyber talent ecosystem broken?

Show Notes: 
Cybersecurity has an identity problem where the industry as a whole is struggling to determine whether it is a trade or a profession. In this episode of CISO Perspectives, host Kim Jones sits down with Larry Whiteside Jr., the Chief Advisory Officer for The CISO Society, to discuss this identity crisis and how the industry as a whole connects to both of these labels. Throughout the conversation, Larry and Kim will discuss the merits and drawbacks of both labels and how cybersecurity does not solely fall into one category or the other.

Want more CISO Perspectives?:
Check out a companion blog post by our very own Ethan Cook, where he breaks down key insights, shares behind-the-scenes context, and highlights research that complements this episode. It’s the perfect follow-up if you’re curious about the cyber talent crunch and how we can reshape the ecosystem for future professionals.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Are we a trade or a profession?

Show Notes: 

While the cybersecurity industry has expanded and grown in recent years, newcomers still struggle to gain relevant "experience" before officially beginning their cyber careers. In this episode of CISO Perspectives, host Kim Jones sits down with Kathleen Smith, the Chief Outreach Officer at clearedjobs.net and the co-host of Security Cleared Jobs: Who’s Hiring & How, to discuss this dilemma and what new entrants can do to account for these difficulties. Throughout the conversation, Kathleen and Kim will discuss the challenges associated with entry-level cyber positions, how to gain meaningful experience, and how the industry as a whole contributes to this problem.

Want more CISO Perspectives?:

Check out a companion ⁠blog post⁠ by our very own Ethan Cook, where he breaks down key insights, shares behind-the-scenes context, and highlights research that complements this episode. It’s the perfect follow-up if you’re curious about the cyber talent crunch and how we can reshape the ecosystem for future professionals.
Learn more about your ad choices. Visit megaphone.fm/adchoices

How do you gain “experience” in cyber without a job in cyber?

Rick Howard, the CyberWire’s Chief Analyst, discusses the next big thing in cybersecurity service delivery. It is called SASE, coined by Gartner last fall, and stands for Secure Access Service Edge (Cloud delivered). It flips on its head how we all consume security services today and it is the perfect solution for small to medium size businesses. In five years, it will be the primary way that all size businesses consume security products.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Your security stack is moving: SASE is coming.

Rick Howard, the CyberWire’s Chief Analyst, discusses the Artificial Intelligence hype. Listen as Rick talks about the emergence of machine learning as a key tool to the detection of cyber adversaries (and the need for big data to pursue that strategy). He also discusses the transition of SIEMS from on-prem devices to cloud-delivered services in order to facilitate the implied big data collection requirement. And, you'll hear about the emergence of XDR that may well fulfill the promise on-prem SIEMs could never deliver: real-time anomaly detection.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Alexa, are you actually self-aware? (And, does it matter?)

Rick Howard, the CyberWire’s Chief Analyst, CSO, and Senior Fellow discusses his favorite cyber novels to distract us from our current emergency situation: "Threat Vector” by Tom Clancy and Mark Greaney, “Neuromancer,” by William Gibson, “Breakpoint,” by Richard A. Clarke, and his favorite hacker novel of all time, “Cryptonomicon,” by Neal Stephenson.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Four cybersecurity novels to distract you from the current zombie apocalypse.

Conveying risk to the company leadership, the metrics collection required to do it, how heat maps are generally bad science, and the requirement for precise modeling of the risk environment.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Metrics and risk: All models are wrong, some are useful.

Rick Howard discusses counterintelligence operations by commercial vendors on the Dark Web and the kinds of intelligence that can be found.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Dark web and TOR: What kind of intelligence can you find there?

This week's CSO Perspectives is the first in a series of shows about cybersecurity strategy. Rick Howard discusses the concept of first principles as an organizing principle and how the technique can be applied to cybersecurity to build a foundational wall of infosec practices that are so fundamental as to be self-evident; so elementary that no expert in the field can argue against them; so crucial to our understanding that without them, the infrastructure that holds our accepted best practice disintegrates like sand castles against the watery tide.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Cybersecurity First Principles.

This is the fifth essay in a planned series that discusses the development of a general purpose cybersecurity strategy for all network defender practitioners-- be they from the commercial sector, government enterprise, or academic institutions-- using the concept of first principles.
Learn more about your ad choices. Visit megaphone.fm/adchoices

Cybersecurity First Principles: DevSecOps.

Listen and read

Other podcasts you might like ...