On this episode of Connected,  Greg was joined by Andy Runyan and Forrest Pace from Brightline Insurance for a timely conversation that dives into all things cybersecurity. 

The idea of cyber insurance started in the 2000s when large corporations were being targeted. However, since the pandemic, activity in cyberattacks against smaller businesses, especially dealerships, have increased. 

Forrest had a great analogy stating "it's like your blind side tackle, you don't think about it until you get sacked." That's why professional IT help is critical to the security and integrity of your business.

Connected Podcast Episode 114: Cyber Mindfulness and Liability

Arun DeSouza, the Managing Director at Profortis Solutions, brings over two decades of experience as a CISO, having developed and implemented award-winning programs in identity lifecycle management and IoT security. His impressive career includes induction into the CISO Hall of Fame by the Global Cyber Startup Observatory and recognition as a top CISO by Cyber Defense Magazine. Arun’s expertise, combined with his academic background—a Ph.D. in Chemical Engineering from Vanderbilt—offers listeners a unique perspective on navigating today’s complex cybersecurity landscape.

From Chemical Engineering to Cybersecurity Leadership

Arun’s journey into cybersecurity is as unconventional as it is inspiring. Initially trained as a chemical engineer, he transitioned to cybersecurity through hands-on experience and a fearless approach to problem-solving. Faced with the challenge of managing global security for a French company, Arun built a strategic plan that not only upgraded systems but also delivered significant savings. His approach, which he calls the “power of federation,” involved collaborating with partners for discounted pricing and consolidating resources.

Navigating Cybersecurity Threats: IoT, Ransomware, and AI

Arun sheds light on the evolving cybersecurity threat landscape, particularly the rapid proliferation of IoT devices. With an estimated 75 billion IoT devices by 2025, the risks associated with insecure software, vulnerable cloud communications, and expanded attack surfaces are more significant than ever. He highlights specific challenges in manufacturing and OT security, where ransomware and supply chain attacks can cripple operations. Arun also warns of the impending threat of AI-powered supply chain attacks, which could amplify the scale and sophistication of breaches. His insights reinforce the need for robust data governance and the adoption of Zero Trust security models to mitigate these risks effectively.

Critical Role of Identity Management and Leadership

Central to Arun’s security philosophy is the concept of identity access management (IAM) as a strategic cornerstone. He introduces the idea of the “identity coin,” which blends physical security (person, device, location) with logical security (attributes, behavior, context). Arun emphasizes that security is not just about technology but also about strong leadership and communication. He advises CISOs to build relationships with senior leaders, use storytelling to convey risks, and align security initiatives with business objectives. His analogy of the CISO as the “captain of the good ship cyber” encapsulates his forward-thinking approach to navigating cybersecurity challenges.

Technical Acumen and Strategic Vision

Arun’s expertise and leadership offer actionable insights for anyone looking to strengthen their cybersecurity strategy. His forward-thinking approach to risk management, identity governance, and embracing change provides a valuable blueprint for both cybersecurity professionals and business leaders. By applying Arun’s principles of strategic planning, collaboration, and Zero Trust security, organizations can navigate today’s complex threat landscape with confidence. 

LinkedIn: https://www.linkedin.com/in/arundesouza/

Profotis Solutions: https://profortissolutions.com/ 


Arun DeSouza: Becoming a Transformational CISO

In episode 18 of Open Source Ready, Brian Douglas and John McBride are joined by Christopher Burns to unpack the complexities of consent management and cookie banners. Discover how Christopher’s open source project, c15t, aims to simplify privacy compliance for developers, bridging the gap between legal requirements and practical implementation. This episode offers a fresh perspective on why consent is not just a legal burden, but a critical component of modern web development.

Subscribe

Open Source Ready - Ep. #18, Consent Management with Christopher Burns

Kitecast features interviews with security, IT, compliance, and risk management leaders and influencers, highlighting best practices, trends, and strategic analysis and insights. Kitecast is cohosted by Tim Freestone and Patrick Spencer who have more than four decades of combined experience in technology and cybersecurity senior leadership roles.

Heavybit is the leading early-stage investor in enterprise infrastructure. Since 2013, we've helped launch and scale visionary technical startups—from DevSecOps and feature flagging to AI code generation and beyond. We go hands-on from day 0, backing founders as they turn code into companies and build the future of software from the bottom up to the top down.

New tracks tagged #Data Compliance