In this episode, Jaye and John discuss with Dana Morimanno how he got into the industry, where his journey began, why zero trust is important in our new hybrid world, why he feels identity should be the starting point for everything we do, and much much more.

Follow & Subscribe on all Podcast platforms.

https://link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Discussion with David Morimanno

In this episode, Jaye and John discuss with Roy Chua how he got into the industry, where his journey began, why zero trust is important in our new hybrid world, the difficulties involved in founding a company, SASE, the growing number of cyber attacks, AvidThink, and much much more.

Follow & Subscribe on all Podcast platforms.

https://link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Discussion with Roy Chua

In this episode, Lisa Forte discusses with Jaye and John the recent activities of the LockBit ransomware group and the limitations of current disruption efforts. She highlights the need for stronger actions, such as making ransom payments illegal, to combat ransomware attacks effectively. 

Lisa also emphasizes the importance of protecting critical data and business services, as well as the challenges of legacy systems and the potential benefits of application transformation. 

The discussion concludes with the significance of email and out-of-band communication and the value of running simulations and playbooks for cyber emergencies. 

In this conversation, Lisa Forte shares insights on incident response and cybersecurity exercises. She emphasizes the importance of preparing for a real incident by creating playbooks and having pre-drafted communication templates. 

Lisa also highlights the significant impact of cybersecurity incidents on individuals and the need for rest and support during such times. 

The conversation then delves into the topic of running exercises, including who should be involved and how often they should be conducted. Lisa also discusses the pitfalls of comparing oneself to others and the importance of focusing on personal progress. 

The conversation concludes with a lighthearted discussion about Lisa's experiences in Japan and the ongoing debate about pineapple on pizza.
 
Takeaways
 
•	Current disruption efforts against ransomware groups like LockBit are not enough to create lasting impact.
•	Making ransom payments illegal may be necessary to change the ransomware landscape.
•	Businesses should focus on protecting critical data and business services, as well as considering alternative processes and redundancy.
•	Legacy systems pose challenges and may require application transformation to enhance security.
•	Email and out-of-band communication are critical during cyber emergencies.
•	Running simulations and playbooks for cyber emergencies can help organizations be better prepared. Prepare for a real incident by creating playbooks and pre-drafting communication templates.
•	Cybersecurity incidents have a significant impact on individuals, and support and rest are crucial during these times.
•	When running exercises, involve leadership and consider the progressive structure of the exercises.
•	Avoid comparing yourself to others and focus on personal progress.
•	Embrace cultural differences, such as coffee consumption habits, when traveling.


Follow & Subscribe on all Podcast platforms.

https://link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Climbing Icy Ransomware Waterfalls With Lisa Forte

Identity is involved in everything we do, and many skills from other IT fields can easily transition into the identity space. It's important to understand the breadth of what identity is trying to accomplish, which is to allow others to interact and consume services in a frictionless and secure manner. 

There are many resources available to learn about identity, including tutorials, classes, and industry websites. Machine identities, such as IoT devices, also need to be treated as identities and have the same controls and management in place. When choosing identity solutions, it's important to understand the organization's objectives, challenges, and requirements before considering specific vendors or tools. 

In this conversation, with John Spiegel and Jaye Tillson, David Morimanno emphasizes the importance of having a sound plan and strategy before implementing identity and access management solutions. He highlights the significance of interpersonal and communication skills in the field of identity access management, as every action has an impact on the business. 

David also stresses the need to understand the business's workflows and goals when implementing solutions. He advises against rushing the implementation process and emphasizes the importance of patience and continuous improvement. 

Additionally, he emphasizes the value of building a solid team and following industry frameworks.

Takeaways

•	Identity is involved in everything we do and many skills from other IT fields can transition into the identity space.
•	Understanding the breadth of what identity is trying to accomplish is important for success in the industry.
•	There are many resources available to learn about identity, including tutorials, classes, and industry websites.
•	Machine identities, such as IoT devices, need to be treated as identities and have the same controls and management in place.
•	When choosing identity solutions, it's important to understand the organization's objectives, challenges, and requirements before considering specific vendors or tools. Have a sound plan and strategy before implementing identity and access management solutions.
•	Interpersonal and communication skills are crucial in identity access management.
•	Understand the business's workflows and goals when implementing solutions.
•	Be patient and continuously improve, as implementing identity and access management solutions takes time.
•	Build a solid team and follow industry frameworks.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

David Morimanno, the Tony Stark of Identity

In this conversation with Jaye Tillson and John Spiegel, Jim Tiller discusses the state of cybersecurity in 2024 and the role of a vCISO. He emphasizes the importance of having a breadth of understanding in cybersecurity and the challenges of keeping up with the evolving industry. 

The conversation also touches on the common risks and concerns across different verticals, the need to raise the cost for attackers, and the debate on platforms and consolidation in the cybersecurity market. 

The conversation explores the disruption and changing landscape of security, the importance of consolidation and simplification, the future of security, the role of Zero Trust and AI, and fun food experiences.

Takeaways

•	Having a breadth of understanding is crucial in the field of cybersecurity, as it covers a wide range of topics including governance, legislation, infrastructure, and more.
•	The role of a VCISO (Virtual Chief Information Security Officer) has emerged as a way to provide strategic security guidance to organizations without the need for a full-time dedicated CISO.
•	The state of cybersecurity in 2024 is characterized by the increasing threat of ransomware and the need for organizations to have a comprehensive cybersecurity strategy.
•	Consolidation in the cybersecurity market is a topic of debate, with some advocating for platform solutions while others emphasize the importance of diversity and integration. Customers are becoming more aware of the disruption and changing nature of security solutions, leading to a desire for more consolidated and simplified approaches.
•	Consolidation and simplification can lead to improved efficiency, cost savings, and better risk management.
•	The future of security may involve advancements in AI and the development of more accessible and user-friendly AI products.
•	Zero Trust remains important, particularly in the federal space, but there is a need to make it more tangible and easier to implement.
•	Food experiences can be memorable and enjoyable, even in unexpected places.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

The Platform Debate with Jim Tiller

Eliza-May Austin shares her journey in the cybersecurity industry and the basics that companies should focus on. She emphasizes the importance of doing the basics right, such as access management, logging and monitoring, and making use of existing security systems. 

Eliza-May also highlights the need for aligning cyber defense with business strategy and avoiding unnecessary complexity. She discusses the challenges of implementing Zero Trust and the importance of communication and education in any project. 

Additionally, Eliza-May shares lessons she has learned as a CEO, including the importance of sleep and downtime for both personal well-being and the success of the business. 

In this conversation, Eliza-May Austin discusses the importance of building a reliable team and setting boundaries to maintain work-life balance. She shares mechanisms she uses to disconnect from technology and take time off. 

Eliza-May also talks about the challenges of being a founder and the impact it can have on relationships. She emphasizes the need to surround oneself with the right people and let go of friendships that don't add value. 

The conversation also touches on the topic of diversity in the tech industry and the importance of integrity.

Takeaways

•	Focus on doing the basics right in cybersecurity, such as access management and logging and monitoring.
•	Make use of existing security systems and align cyber defense with business strategy.
•	Avoid unnecessary complexity in cybersecurity projects.
•	Implementing Zero Trust requires careful planning, communication, and education.
•	As a CEO, prioritize sleep and downtime for personal well-being and the success of the business. Building a reliable team is critical for success as a founder.
•	Setting boundaries and disconnecting from technology are important for maintaining work-life balance.
•	Surrounding oneself with the right people and letting go of friendships that don't add value is necessary for personal and professional growth.
•	The tech industry still lacks diversity, and there is a need to move beyond tokenism and focus on hiring based on merit.
•	Maintaining integrity is crucial in the cybersecurity industry and in leadership roles.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Balancing Business, Security and Life with Eliza-May Austin

In this episode of The Edge, Anne Coulombe discusses the concept of Zero Trust as a principle rather than a product or strategy. She emphasizes the importance of identity in Zero Trust and how it can enhance both security and user experience. 

Anne also highlights the need for Zero Trust in industries like healthcare and life sciences, where data privacy and security are crucial. She explains the role of user behavior analytics and AI in Zero Trust and emphasizes the importance of responsible AI and governance. Anne also discusses the future of cloud computing and the continued relevance of networks.

Takeaways

•	Zero Trust is a principle that leverages network, IAM, and other security elements to create a secure environment for processing data.
•	Zero Trust enhances both security and user experience by reducing friction in accessing resources and adapting access based on user identity.
•	Industries like healthcare and life sciences are adopting Zero Trust to secure devices and systems and protect patient data.
•	User behavior analytics and AI can play a crucial role in identifying abnormal behavior and preventing security threats.
•	Cloud computing and Zero Trust go hand in hand, with identity being a key component in securing cloud-based services.
•	The future of cloud computing involves faster compute, AI, ML, and responsible AI with proper governance.
•	Networks are not dead but are being transformed and will continue to evolve alongside advancements in technology.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Healthcare and Zero Trust with Anne Coulombe

Joe Sullivan, former CISO of Uber and Facebook, shares his journey in the IT and security industry and discusses the evolving relationship between the public and private sectors in cybersecurity. 

He highlights the need for collaboration and communication between government agencies and tech companies to improve cybersecurity practices. 

Joe also emphasizes the importance of CISOs having a voice in policymaking and investing in tools that facilitate incident response and coordination across departments. He encourages the security community to continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. 

The conversation covers topics such as cybersecurity standards, the need for a clear and objective minimum bar, the role of the security leader, the importance of cross-functional collaboration, the evolving role of CISOs, and the challenges they face. 

It also touches on the need for better communication, incident response preparedness, and educating the wider team about cybersecurity. 

The conversation concludes with a discussion about the importance of protecting digital risks and the role of CISOs in addressing them.

Takeaways
•	Collaboration and communication between government agencies and tech companies are crucial for improving cybersecurity practices.
•	CISOs need to have a voice in policymaking and provide feedback on regulations to ensure their perspectives are considered.
•	Investing in tools that facilitate incident response and coordination across departments is essential for effective cybersecurity management.
•	The security community should continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. There is a need for a clear and objective minimum bar for cybersecurity standards.
•	The role of the security leader is evolving to include responsibilities beyond cybersecurity.
•	Cross-functional collaboration is crucial for effective cybersecurity.
•	CISOs need to educate the wider team about cybersecurity and the importance of their involvement.
•	Incident response preparedness is essential, as it is likely that organizations will face a cybersecurity incident at some point.
•	CISOs should take a proactive approach to address digital risks and protect the organization.
•	The cybersecurity community needs to come together and support each other in the fight against cyber threats.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

The Role of CISOs in Policymaking with Joe Sullivan

In this conversation, Nick Mullen, the founder and CEO of Sanguine Security Solutions, discusses his journey into the cybersecurity field and the importance of the human element in security. 

He shares an analogy of protecting a pot of gold to explain the concept of zero trust. The conversation also highlights the need for a comprehensive strategy that makes secure choices easy choices and addresses the human attack surface. It emphasizes the importance of relevant and targeted training to combat social engineering attacks. 

The discussion concludes with the suggestion of implementing technologies like push authentication to enhance security. The conversation covers topics such as the lack of a framework for mapping the human attack surface, the role of governance in cybersecurity, and the challenges of communicating the value of security. 



Takeaways
•	The human element plays a significant role in cybersecurity, with a large percentage of breaches involving social engineering.
•	Zero trust is a strategy that requires a comprehensive approach, making secure choices the easy choices and addressing the human attack surface.
•	Training should be relevant and targeted to individual roles and responsibilities, rather than a one-size-fits-all approach.
•	Implementing technologies like push authentication can enhance security and protect against social engineering attacks. There is a lack of a framework for mapping the human attack surface and implementing tools and technologies to protect against it.
•	Governance plays a crucial role in ensuring that organizations are doing what they are supposed to be doing and doing it well.
•	Good governance should support an organization's enterprise goals and strategies, whether they are focused on growth and innovation or cost leadership and stability.
•	The role of security professionals is often misunderstood, and there is a need to communicate the positive impact of security measures to the wider audience.
•	Personal preferences for pineapple on pizza vary, but it can be seen as a divisive topic.
•	Ranch dressing is a popular staple in Midwest cuisine.
•	Ireland is a highly recommended travel destination known for its beautiful landscapes and friendly people.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

The Human Element in Cybersecurity with Nick Mullen

Video killed the radio star, and SASE killed the firewall. While it may not be as catchy, it might be just as valid. The shift to the cloud changed the way businesses work, and now it is having impacts on how they protect themselves. 

To dig into this bold statement, and unpack the impact AI will have on small and medium businesses, Ian is joined by Tim Orozco, Managing Partner of Stratus Information Systems, a top SMB partner of Cisco.

Learn more about Cisco's solutions for SMBs: www.cisco.com/c/en_uk/solutions/…mall-business.html

View Stratus Information Systems' solutions here: https://stage.stratusinfosystems.com/ 

Small Business, Big Solutions: Is SASE Killing the Firewall?

Listen to experts discuss the latest in Zero Trust security on our podcast! Explore topics like adaptive access control, data protection, and insider threat mitigation. Stay informed about Zero Trust architecture, best practices, and real-world case studies to enhance your cybersecurity strategy. Tune in for insights and advice on building a resilient, secure infrastructure.

The Cisco Podcast Network is a collective of podcasts from across Cisco spanning technology to culture and everything in between. Hear from Cisco customers, partners, and Cisco insiders on the topics that matter most to you. Email us with your feedback and suggestions. Discover your favorite playlists today!

New tracks tagged #SASE