App Store

Google Play

Details page - Device banner - 894x1036

Step into an infinite world of stories

Listen and read

David Spark

Geoff Belknap

Steve Zalewski

Defense in Depth promises clear talk on cybersecurity’s most controversial and confusing debates. Once a week we choose one controversial and popular cybersecurity debate and use the InfoSec community’s insights to lead our discussion.

Defense in Depth

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Joining us is our sponsored guest, Itai Tevet, CEO, Intezer.
 
In this episode:
 
 • Build for what you can handle
 • Rethinking alerts
 • Building trust into your system
 • Seeing the bigger picture
 
Thanks to our podcast sponsor, Intezer
 

 
 Intezer’s AI-driven solution automates alert triage and investigations, cutting through the noise to highlight serious threats. By integrating with your security tools, it escalates only 4% of alerts for fast remediation, helping SOC teams focus on what matters. Learn more at intezer.com today!

How Can We Fix Alert Fatigue?

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Ross Young, CISO-in-residence, Team8, and Jeroen Schipper, CISO, Gemeente Den Haag.
 
In this episode:
 
 • Creating authority
 • Don’t reinvent the wheel
 • Accountable for quality
 • Make the distinction clear
 
Thanks to our podcast sponsor, Fenix24
 

 
You’ve invested in cybersecurity, but can your business recover when it counts? The Securitas Summa program from the Conversant Group combines resistance, managed protection, and rapid recovery to minimize downtime and restore operations faster than anyone else. Resilience isn’t optional. Click to see how it works.

CISOs DO Own the Risk

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap). Joining us is our sponsored guest, Rob Allen, chief product officer, ThreatLocker.
 
In this episode:
 
 • The promise and perils of LLMs
 • A boon for defenders
 • Raising the bar
 • Muddying the waters
 
Thanks to our podcast sponsor, ThreatLocker
 

 
 ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Is AI Benefiting Attackers or Defenders?

All links and images for this episode can be found on CISO Series.
 
Check out this post by Marc Ashworth, CISO at First Bank for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Shawn Bowen, vp, deputy CISO - Gaming, Microsoft. Joining us is Ken Athanasiou, CISO, VF Corporation.
 
In this episode:
 
 • Frustration is a two-way street
 • Sales is data driven
 • Give customers the tools they need
 • Start a conversation
 
Thanks to our podcast sponsor, Noma Security
 

 
Secure your entire Data & AI Lifecycle—from development to production and classic data engineering to GenAI. Noma’s full-lifecycle platform delivers seamless protection against risks like misconfigured data pipelines, malicious models, and adversarial AI attacks, empowering AppSec teams with complete visibility, security, and compliance—without disrupting data and AI teams’ workflows.

Do We Want CISOs Dictating How Salespeople Should Engage?

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining us is Gaurav Kapil, CISO, Bread Financial.
 
In this episode:
 
 • It helps to have a vision
 • The benefit of planning
 • It’s never too early to start
 • Don’t make rash decisions
 
Thanks to our podcast sponsor, ThreatLocker
 

 
 ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

If and When Should a CISO Have a Long Term Security Plan?

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap). Joining us Sneha Parmar, information security officer, Lufthansa Group Digital Hangar.
 
In this episode:
 
 • Build the foundation
 • Building at scale
 • Excelling at boring
 • Knowing what you’ve got is half the battle
 
Thanks to our podcast sponsor, Fenix24
 

 
You’ve invested in cybersecurity, but can your business recover when it counts? The Securitas Summa program from the Conversant Group combines resistance, managed protection, and rapid recovery to minimize downtime and restore operations faster than anyone else. Resilience isn’t optional. Click to see how it works.

The Hardest Problems in Security Aren't "Security Problems"

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap). Joining us is Andrew Wilder, CISO, Vetcor.
 
In this episode:
 
 • It comes down to growth
 • Maintenance mode is anything but simple
 • An asymmetric arrangement
 • Integrating with the business
 
 Thanks to our podcast sponsor, ThreatLocker
 

 
ThreatLocker® is a global leader in Zero Trust endpoint security, offering cybersecurity controls to protect businesses from zero-day attacks and ransomware. ThreatLocker operates with a default deny approach to reduce the attack surface and mitigate potential cyber vulnerabilities. To learn more and start your free trial, visit ThreatLocker.com.

Can a Security Program Ever Reach Maintenance Mode?

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and DJ Schleen, former distinguished security architect, Yahoo. Joining us is our sponsored guest Heath Renfrow, co-founder, Fenix24.
 
In this episode:
 
 • Get creative
 • Shift the focus of backups
 • Failing the test
 • Moving beyond false hope
 
Thanks to our podcast sponsor, Fenix24
 

 
You’ve invested in cybersecurity, but can your business recover when it counts? The Securitas Summa program from the Conversant Group combines resistance, managed protection, and rapid recovery to minimize downtime and restore operations faster than anyone else. Resilience isn’t optional. Click to see how it works.

Protecting Your Backups from Ransomware

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Geoff Belknap (@geoffbelknap). Joining us is Elad Koren, vp, product management, Cortex Cloud, Palo Alto Networks.
 
In this episode:
 
 • Context drives the decision
 • A full-spectrum understanding
 • Think practical
 • The long play
 
Thanks to our podcast sponsor, Palo Alto Networks
 

 
Cortex Cloud, the next generation of Prisma Cloud, merges best-in-class CDR with industry-leading CNAPP for real-time cloud security. Harness the power of AI and automation to prioritize risks with runtime context, enable remediation at scale, and stop attacks as they occur. Bring together your cloud and SOC on the unified Cortex platform to transform end-to-end operations. Experience the future of real-time cloud security at https://www.paloaltonetworks.com/cortex/cloud.

Is Platformization Vs Best-of-Breed a False Dichotomy?

All links and images for this episode can be found on CISO Series.
 
Check out this post for the discussion that is the basis of our conversation on this week’s episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Lee Parrish, CISO, Newell Brands. Joining us is David Tyburski, vp of information security and CISO, Wynn Resorts.
 
In this episode:
 
 • 

CISOs need to stick around
 • 
 
Culture forward
 
CISOs need support
 
This isn’t always about budget 
 
Thanks to our podcast sponsor, Palo Alto Networks!
 
 
 
Cortex Cloud, the next generation of Prisma Cloud, merges best-in-class CDR with industry-leading CNAPP for real-time cloud security. Harness the power of AI and automation to prioritize risks with runtime context, enable remediation at scale, and stop attacks as they occur. Bring together your cloud and SOC on the unified Cortex platform to transform end-to-end operations. Experience the future of real-time cloud security at https://www.paloaltonetworks.com/cortex/cloud.

Are CISOs Struggling to Get Respect?

All images and links can be found on CISO Series.
 
Check out this post by Gautam ‘Gotham’ Sharma of AccessCyber for the discussion that is the basis of our conversation on this week’s episode, co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Joining us is Krista Arndt, associate CISO, St. Luke’s University Health Network.
 
In this episode:
 
 • Verify then trust
 • Dishonesty on all sides
 • A lack of flexibility
 • What about integrity?
 
Huge thanks to our sponsor, Formal
 

 
Formal secures humans, AI agent’s access to MCP servers, infrastructure, and data stores by monitoring and controlling data flows in real time. Using a protocol-aware reverse proxy, Formal enforces least-privilege access to sensitive data and APIs, ensuring AI behavior stays predictable and secure. Visit joinformal.com to learn more or schedule a demo.

Why Cybersecurity Professionals Lie on Their Resumes

Listen and read

Other podcasts you might like ...