Arun DeSouza, the Managing Director at Profortis Solutions, brings over two decades of experience as a CISO, having developed and implemented award-winning programs in identity lifecycle management and IoT security. His impressive career includes induction into the CISO Hall of Fame by the Global Cyber Startup Observatory and recognition as a top CISO by Cyber Defense Magazine. Arun’s expertise, combined with his academic background—a Ph.D. in Chemical Engineering from Vanderbilt—offers listeners a unique perspective on navigating today’s complex cybersecurity landscape.

From Chemical Engineering to Cybersecurity Leadership

Arun’s journey into cybersecurity is as unconventional as it is inspiring. Initially trained as a chemical engineer, he transitioned to cybersecurity through hands-on experience and a fearless approach to problem-solving. Faced with the challenge of managing global security for a French company, Arun built a strategic plan that not only upgraded systems but also delivered significant savings. His approach, which he calls the “power of federation,” involved collaborating with partners for discounted pricing and consolidating resources.

Navigating Cybersecurity Threats: IoT, Ransomware, and AI

Arun sheds light on the evolving cybersecurity threat landscape, particularly the rapid proliferation of IoT devices. With an estimated 75 billion IoT devices by 2025, the risks associated with insecure software, vulnerable cloud communications, and expanded attack surfaces are more significant than ever. He highlights specific challenges in manufacturing and OT security, where ransomware and supply chain attacks can cripple operations. Arun also warns of the impending threat of AI-powered supply chain attacks, which could amplify the scale and sophistication of breaches. His insights reinforce the need for robust data governance and the adoption of Zero Trust security models to mitigate these risks effectively.

Critical Role of Identity Management and Leadership

Central to Arun’s security philosophy is the concept of identity access management (IAM) as a strategic cornerstone. He introduces the idea of the “identity coin,” which blends physical security (person, device, location) with logical security (attributes, behavior, context). Arun emphasizes that security is not just about technology but also about strong leadership and communication. He advises CISOs to build relationships with senior leaders, use storytelling to convey risks, and align security initiatives with business objectives. His analogy of the CISO as the “captain of the good ship cyber” encapsulates his forward-thinking approach to navigating cybersecurity challenges.

Technical Acumen and Strategic Vision

Arun’s expertise and leadership offer actionable insights for anyone looking to strengthen their cybersecurity strategy. His forward-thinking approach to risk management, identity governance, and embracing change provides a valuable blueprint for both cybersecurity professionals and business leaders. By applying Arun’s principles of strategic planning, collaboration, and Zero Trust security, organizations can navigate today’s complex threat landscape with confidence. 

LinkedIn: https://www.linkedin.com/in/arundesouza/

Profotis Solutions: https://profortissolutions.com/ 


Arun DeSouza: Becoming a Transformational CISO

This UVA Speaks podcast features Philip Potter, Professor of Politics in the Department of Politics, founding Director of the Frank Batten School of Leadership and Public Policy’s National Security Policy Center, and founding Director of the National Security Data and Policy Institute at the University of Virginia. Potter explains that the National Security Data and Policy Institute, a collaboration between the University of Virginia and the Office of the Director of National Intelligence, seeks to bridge the gap between government and academia to address the country’s most pressing national security issues. The Institute researches the challenges of data proliferation and emerging technologies like Artificial Intelligence and biotechnology. 

Transcripts of the audio broadcast can be found here. https://www.rev.com/transcript-editor/shared/adEVxlrt1V_7LlRLjT3PgKaTjPBBA2Yo4XlubqQZa4uaM4wndK5zl8Mztdct0S5nom-gITiKW6B0lZKOk6UeeTWDxWk?loadFrom=SharedLink

Philip Potter is a Professor of Politics from the Department of Politics at the College and Graduate School of Arts & Sciences and the founding Director of the National Security Policy Center at the Frank Batten School of Leadership and Public Policy and the National Security Data Policy Institute at the University of Virginia. Professor Potter’s research focuses on US foreign policy, military affairs, and international security. He has published dozens of articles, policy papers, and government reports on these topics as well as two books. He also serves as a university expert for the Intelligence Community and a senior advisor in the Department of Defense.

UVA’s National Security Data and Policy Institute

Welcome to the Identity Theft Resource Center's (ITRC’s) Weekly Breach Breakdown for March 14, 2025. I'm Timothy Walden. Thanks to SentiLink for their support of the ITRC and this podcast. 

Each week on this podcast, we look at the most recent events and trends related to data security and privacy. Today, we’ll discuss some of the most notable data breach exposures from February 2025, focusing on a breach that impacted millions of individuals and a couple of others worth noting. 

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC - February 2025 Notable Breaches - S6E8

Welcome to the Identity Theft Resource Center's (ITRC) Weekly Breach Breakdown for April 11, 2025. I'm Timothy Walden. Thanks to SentiLink for their support of the ITRC and this podcast. Each week, we bring you the latest developments in data security and privacy. Today, we’re going to discuss something that is gaining more traction in the digital world: Chat GPT. More specifically, OpenAI’s new image generator, which is part of the ChatGPT family. 

If you haven’t heard, this tool can create everything from art in the style of the famous Japanese anime maker Studio Ghibli to images promoting Bitcoin investments. While the tool has gone viral for its creativity, it’s also raising some serious concerns about its potential for misuse, particularly in the hands of scammers.

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC - Fake It Til You Make It - S6E11

Welcome to the Identity Theft Resource Center's (ITRC) Weekly Breach Breakdown for April 18, 2025. I'm Alex Achten, Senior Director of Communications & Media Relations of the ITRC. Thanks to Sentilink for supporting the ITRC and this podcast. Each week, we look at the most recent events and trends related to data security and privacy. Today, we look at our Q1 2025 data breach findings.

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on X: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC - Once More Unto The Breach - S6E12

Welcome to the Identity Theft Resource Center's (ITRC’s) Weekly Breach Breakdown for May 16, 2025. I'm Alex Achten, Senior Director of Communications & Media Relations of the ITRC. Thanks to Sentilink for supporting the ITRC and this podcast. 

Each week, we look at the most recent events and trends related to data security and privacy. Today, we will analyze the newly formed data privacy consortium. 

Follow on LinkedIn: www.linkedin.com/company/idtheftcenter/
Follow on Twitter: twitter.com/IDTheftCenter

The Weekly Breach Breakdown Podcast by ITRC - Moving Forward Together - S6E15

In this first episode of Privacy Perspectives, a new Ad Law Access podcast mini-series, Alex Schneider talks with Celine Guillou about how businesses can put their best foot forward when engaging with enforcement agencies and regulators in privacy and security investigations.

Celine recently joined Kelley Drye as Special Counsel after serving in the Enforcement Division of the California Privacy Protection Agency (CPPA). She shares insights from her time at the CPPA, including common areas of regulatory focus and practical guidance for responding to enforcement requests.

Alex and Celine also discuss the broader landscape of state privacy laws, emerging enforcement trends, and steps companies can take to strengthen compliance programs before an investigation ever starts.

ABOUT THE SPEAKERS
Celine Guillou
Special Counsel, Advertising and Privacy Group
Former Enforcement Attorney, California Privacy Protection Agency
cguillou@kelleydrye.com
(213) 547-4946
www.kelleydrye.com/people/celine-m-guillou

Alex Schneider
Special Counsel, Advertising and Privacy Group
aschneider@kelleydrye.com
(202) 342-8634
www.kelleydrye.com/people/alexander-i-schneider

RESOURCES
Subscribe to the Ad Law Access blog:
www.kelleydrye.com/subscribe
Subscribe to the Ad Law News newsletter:
www.kelleydrye.com/subscribe
Visit the Advertising and Privacy Law Resource Center:
www.kelleydrye.com/advertising-and-privacy-law
Find all of our links here:
linktr.ee/KelleyDryeAdLaw

Privacy Perspectives: Preparing for Privacy Enforcement Inquiries

A seismic shift is hitting the digital certificate landscape. Google has announced strict enforcement of Extended Key Usage (EKU) policies for all certificates in the Chrome Root Store, effective June 15, 2026. This means the days of using a single TLS certificate for multiple purposes, like client authentication, internal microservices, or code signing, are numbered. In this episode of Encryption Edge, we explore how this update, paired with the new 47-day maximum certificate lifespan, is forcing enterprises to rethink everything from certificate architecture to lifecycle management. 
 
Key Takeaways:
What Google's EKU enforcement means for your infrastructure
How shorter certificate lifespans demand automation
Real-world risks of non-compliance, including outages and distrust
Why internal PKI, CLM automation, and CA agility are now must-haves
Immediate actions security and DevOps teams should take

Inside Google’s Certificate Reform: Shorter Lifespans, Stricter Rules

The European Union has released a detailed roadmap to guide its transition to post-quantum cryptography, and it's set to impact organizations worldwide. In this episode of The Encryption Edge, Wyatt Hackathorne unpacks what the roadmap means, the urgent timelines it sets, and the concrete actions organizations should take today. From understanding the "store now, decrypt later" threat to preparing your supply chain and internal systems for cryptographic agility, this episode is your essential guide to navigating one of the most important shifts in cybersecurity.

Decrypting the EU’s Post-Quantum Cryptography Roadmap

In this episode, host Wyatt Hackathorne breaks down the new bipartisan National Quantum Cybersecurity Migration Strategy Act introduced in late July 2025. The bill, a critical follow-up to the June Executive Orders, mandates a coordinated national strategy for transitioning federal systems to quantum-safe encryption. Learn how this combined effort provides the U.S. with a clear roadmap to proactively secure its data against the looming threat of quantum computers.

U.S. Quantum Readiness Takes a Leap

Kitecast features interviews with security, IT, compliance, and risk management leaders and influencers, highlighting best practices, trends, and strategic analysis and insights. Kitecast is cohosted by Tim Freestone and Patrick Spencer who have more than four decades of combined experience in technology and cybersecurity senior leadership roles.

The Encryption Edge – Your go-to podcast for all things encryption, cybersecurity, and data protection. Whether you're an industry expert or just getting started, we break down complex topics like cryptography, PKI, post-quantum security, and cloud encryption in a way that's easy to understand. Stay ahead of emerging threats, compliance requirements, and the latest security trends with expert insights and practical advice from Encryption Consulting.

The University of Virginia Lifetime Learning program enriches the intellectual life of UVA’s alumni, friends, and families through faculty lectures and online resources.

The Ad Law Access podcast, now available daily, is powered by Kelley Drye’s Advertising and Privacy / Data Security teams. 

Hosted by Simone Roach, the daily podcast complements the award-winning Ad Law Access blog, and provides updates and analysis on advertising, marketing, and privacy / data security law.

Please visit the Advertising and Privacy Law Resource Center at https://www.kelleydrye.com/Advertising-and-Privacy-Law-Resource-Center and our award winning blog at https://adlawaccess.com.

New tracks tagged #data security