Welcome to "The CvCISO Podcast" - an extension of SecurityStudio's vCISO training program. Designed to keep the conversation alive beyond the confines of traditional training, this podcast is your ongoing resource for all things related to Virtual Chief Information Security Officers (vCISOs). This podcast is a space where vCISOs can continue to explore, discuss, and evolve their understanding of the cybersecurity landscape. Join us as we delve into the experiences, perspectives, and challeng ...
…
continue reading
Securitystudio Podcasts

1
CvCISO Podcast Episode 64 Joe Erle and the State of Cyber Insurance
53:12
53:12
Play later
Play later
Lists
Like
Liked
53:12Takeaways Cyber insurance is essential for businesses to manage risk. Understanding the nuances of cyber insurance policies is crucial. The cyber insurance industry has evolved significantly post-COVID. Claims can be denied due to misrepresentation of information. Insurance applications are becoming more standardized across providers. Brokers play …
…
continue reading

1
CvCISO Podcast Episode 63 The Salt Typhoon Attack
49:13
49:13
Play later
Play later
Lists
Like
Liked
49:13Summary In this episode, the hosts discuss the Salt Typhoon hacking group, their recent attacks on US companies, and the broader implications of cybersecurity threats. They explore the reasons behind the naming of hacker groups, the importance of risk management, and the need for situational awareness in organizations. The conversation delves into …
…
continue reading

1
CvCISO Podcast Episode 62: The AI Myth or Fact Game
46:10
46:10
Play later
Play later
Lists
Like
Liked
46:10The podcast features a lively discussion among hosts and guests. Cybersecurity news is a critical topic in today's digital landscape. AI raises ethical questions regarding likeness and consent. Recent breaches highlight the need for accountability in cybersecurity. Community engagement is essential for raising awareness about cybersecurity issues. …
…
continue reading

1
CvCISO Podcast Episode 61 : St. Paul Ransomware Cyber Attack
57:42
57:42
Play later
Play later
Lists
Like
Liked
57:42In this episode, the hosts discuss the recent cybersecurity attack on St. Paul, Minnesota, exploring the nature of the attack, the implications for city services, and the importance of effective communication and incident response planning. They emphasize the need for transparency and accountability in handling such incidents, as well as the role o…
…
continue reading

1
CvCISO Podcast Episode 60 Top 10 Mistakes vCISO's Make
50:00
50:00
Play later
Play later
Lists
Like
Liked
50:00Summary In this episode, the hosts discuss the top 10 mistakes made by Virtual Chief Security Officers (VCSOs) and how to avoid them. They emphasize the importance of understanding the role of a VCSO, effective communication with business leaders, and the need for a strategic approach to security rather than relying solely on tools. The conversatio…
…
continue reading

1
CvCISO Podcast Episode : 59 CvCISO Red Flags
49:28
49:28
Play later
Play later
Lists
Like
Liked
49:28Summary In this episode of the CvcISO So Podcast, hosts Evan Francen, Dave, and Jordon explore the humorous side of cybersecurity by identifying various red flags in VC engagements. The conversation is filled with laughter as they share funny anecdotes and insights about what to look out for in cybersecurity practices, emphasizing the importance of…
…
continue reading

1
CvCISO Podcast Episode 58: Hourly Work or Objective Based Differences
53:57
53:57
Play later
Play later
Lists
Like
Liked
53:57Keywords CVCISO, pricing models, objective-based pricing, hourly pricing, client relationships, communication, mentorship, community support, value delivery, business growth takeaways Objective-based pricing aligns with client needs and expectations. Hourly pricing can create a liability for service providers. Building trust with clients is essenti…
…
continue reading

1
CvCISO Podcast Episode 57: Incident Response
53:50
53:50
Play later
Play later
Lists
Like
Liked
53:50Summary In this episode, the hosts explore key elements of effective cybersecurity incident response. They emphasize the importance of distinguishing between events and incidents, properly classifying incidents by severity, and understanding the strategic role of a vCISO (Virtual Chief Information Security Officer). The conversation highlights the …
…
continue reading

1
CvCISO Podcast Episode 56: AI and Its Societal Impact
56:44
56:44
Play later
Play later
Lists
Like
Liked
56:44Summary In this episode, the hosts discuss the pervasive influence of AI in our lives, particularly its implications for education, creativity, and ethical considerations. They explore the rapid deployment of AI technologies without adequate understanding or guidelines, the accountability of AI developers, and the potential for manipulation of info…
…
continue reading

1
CvCISO Podcast Episode 55: How to Engage C-Suite
36:24
36:24
Play later
Play later
Lists
Like
Liked
36:24Summary In this episode, the hosts discuss effective communication strategies for engaging with C-suite executives. They emphasize the importance of concise messaging, understanding executive priorities, and building relationships based on empathy and common interests. The conversation highlights the need for adaptability in communication styles an…
…
continue reading

1
CvCISO Podcast Episode 54: How to Find Your Why
50:22
50:22
Play later
Play later
Lists
Like
Liked
50:22Summary In this episode, the hosts explore the concept of 'why' and its significance in personal and professional life. They discuss the importance of discovering one's core values and how these values shape actions and decisions. Through personal reflections and exercises, the conversation delves into the impact of admiration on self-discovery and…
…
continue reading

1
CvCISO Podcast Episode 53: Mental Health Awareness Month
1:06:17
1:06:17
Play later
Play later
Lists
Like
Liked
1:06:17Summary In this episode, the hosts discuss Mental Health Awareness Month, sharing personal stories and insights about mental health challenges. They emphasize the importance of being open about mental health, the stigma surrounding it, and the role of therapy. The conversation also touches on misconceptions about mental health, the impact of diet a…
…
continue reading

1
CvCISO Podcast Episode 52: Essential Questions vCISOs Need to Ask
45:12
45:12
Play later
Play later
Lists
Like
Liked
45:12Summary In this episode of the CvCISO Podcast, the hosts engage in a light-hearted conversation that transitions into deeper discussions about the importance of relationships in business, essential questions to ask when engaging with clients, understanding business motivations, and the significance of trust and credibility in professional interacti…
…
continue reading

1
CvCISO Podcast Episode 51: Salary Expectations for vCISOs
44:00
44:00
Play later
Play later
Lists
Like
Liked
44:00Summary In this episode, the hosts discuss the complexities surrounding the compensation and role of a Virtual Chief Information Security Officer (VCISO). They explore various factors influencing salary, the distinction between VCISO and CISO roles, and the importance of technical knowledge and mentorship in developing effective security leaders. T…
…
continue reading

1
CvCISO Podcast Episode 50: How to Stay Educated as a vCISO
54:14
54:14
Play later
Play later
Lists
Like
Liked
54:14Summary In this special 50th episode of the CvCISO Podcast, the hosts celebrate their milestone while discussing the importance of continuing education for venture capitalists (VCs). They explore various strategies for staying educated, including maximizing conference experiences, understanding CPE requirements, and aligning learning with career go…
…
continue reading

1
CvCISO Podcast Episode 49: Embellishing Credentials - A Dangerous Game
43:29
43:29
Play later
Play later
Lists
Like
Liked
43:29Summary In this episode, the hosts discuss the controversy surrounding Mark Lanterman, a forensic expert accused of embellishing his credentials. They explore the implications of credibility and integrity in the cybersecurity field, particularly for expert witnesses. The conversation delves into the ethical responsibilities of professionals and the…
…
continue reading

1
CvCISO Podcast Episode 48: Infragard Critical Infrastructure
53:43
53:43
Play later
Play later
Lists
Like
Liked
53:43Summary In this episode, Meg and Dave discuss the importance of viewing information security not just as an IT issue, but as an organizational and societal concern. They explore how different departments within an organization contribute to security and the need for a holistic approach. The conversation also delves into the societal dependency on t…
…
continue reading

1
CvCISO Podcast Episode 47: Fear of Failure
41:09
41:09
Play later
Play later
Lists
Like
Liked
41:09Summary In this episode, the hosts discuss the concept of failure, exploring its inevitability and the importance of embracing it as a part of growth. They share personal anecdotes and insights from a book titled 'Chasing Failure,' emphasizing that failure can lead to unexpected opportunities and learning experiences. The conversation also touches …
…
continue reading
Summary In this episode of the CvCISO Podcast, host Evan Francen and co-hosts Jordan and Meg welcome Dave Tuckman, the new Executive Director at the Academy. They discuss Dave's background in IT and cybersecurity, his transition to FRSecure, and the importance of awareness training in the industry. The conversation also touches on work-life balance…
…
continue reading

1
CvCISO Podcast Episode 45: Building a Security First Culture
49:39
49:39
Play later
Play later
Lists
Like
Liked
49:39Summary In this episode, the hosts discuss the importance of integrating security into business culture while maintaining a fun and engaging environment. They explore the concept of a 'security first' mentality, emphasizing that security should not overshadow business objectives but rather be a part of them. The conversation highlights the signific…
…
continue reading

1
CvCISO Podcast Episode 44: Essential Tips for vCISOs
1:03:48
1:03:48
Play later
Play later
Lists
Like
Liked
1:03:48Summary In this episode, the hosts discuss essential tips for Virtual Chief Security Officers (VCSOs), emphasizing the importance of understanding the business context before addressing security concerns. They highlight the need for preparation, relationship building, and simplifying complex security concepts to effectively communicate with busines…
…
continue reading

1
CvCISO Podcast Episode 43: DOGE and Information Security
51:38
51:38
Play later
Play later
Lists
Like
Liked
51:38Summary In this episode, Evan and Jordon dive into the controversial topic of Doge, discussing its implications on government efficiency and information security. They explore the emotional responses surrounding political decisions, the role of trust in government, and the privacy concerns that arise from data access. The conversation emphasizes th…
…
continue reading

1
CvCISO Podcast Episode 42: Breaking Into Cybersecurity - A Guide for Newcomers
57:54
57:54
Play later
Play later
Lists
Like
Liked
57:54Summary In this episode, the hosts discuss the various pathways into the cybersecurity field, addressing the challenges faced by newcomers and those looking to transition into the industry. They share personal stories of their journeys, the importance of having a clear purpose, and the role of education and certifications in building a successful c…
…
continue reading
Summary In this episode, the hosts discuss the significance of mentorship in personal and professional development. They explore the nuances of what mentorship means, the difference between wisdom and education, and how informal mentorship can occur within communities. The conversation emphasizes the importance of experience, the role of mentors in…
…
continue reading

1
CvCISO Podcast Episode 40: AI in the Workplace
56:20
56:20
Play later
Play later
Lists
Like
Liked
56:20Summary In this episode, the hosts discuss the significance of mentorship in personal and professional development. They explore the nuances of what mentorship means, the difference between wisdom and education, and how informal mentorship can occur within communities. The conversation emphasizes the importance of experience, the role of mentors in…
…
continue reading

1
CvCISO Podcast Episode 39: vCISO Role in BCI and DRP
55:52
55:52
Play later
Play later
Lists
Like
Liked
55:52Summary In this episode, the hosts and guests delve into the concept of Zero Trust Architecture, discussing its legitimacy, implementation challenges, and the importance of understanding its principles. They explore how Zero Trust can enhance security while also serving as a business strategy that can potentially reduce costs and increase revenue t…
…
continue reading

1
CvCISO Podcast Episode 38: Zero Trust: Is it Real?
57:25
57:25
Play later
Play later
Lists
Like
Liked
57:25In this episode, the hosts and guests delve into the concept of Zero Trust Architecture, discussing its legitimacy, implementation challenges, and the importance of understanding its principles. They explore how Zero Trust can enhance security while also serving as a business strategy that can potentially reduce costs and increase revenue through b…
…
continue reading

1
CvCISO Podcast Episode 37: MN Local Chapter 2024 Year in Review
51:50
51:50
Play later
Play later
Lists
Like
Liked
51:50In this episode of the CvCISO Podcast, the hosts and guests discuss the Minnesota Local Chapter's progress, focusing on community building, mental health check-ins, and the importance of support structures in the information security field. They share insights on how the chapter has fostered a sense of belonging and collaboration among its members,…
…
continue reading

1
CvCISO Podcast Episode 36: A Year in Review
58:29
58:29
Play later
Play later
Lists
Like
Liked
58:29Summary In this episode, the hosts discuss updates on the CvCISO Academy, reflecting on the past year and looking forward to 2025. They emphasize the importance of community engagement, new leadership roles, and the need for standardization in cybersecurity practices. The conversation also touches on personal growth and the value of continuous lear…
…
continue reading

1
CvCISO Podcast Episode 35: vCISO Habits and Routines
50:31
50:31
Play later
Play later
Lists
Like
Liked
50:31Summary In this episode of the CvCISO Podcast, hosts Evan, Meg, and Jordon discuss the essential routines and habits for vCISOs, emphasizing the importance of building strong relationships, understanding pricing, and the value of intangibles in cybersecurity. They explore the pathways to entering the cybersecurity field, including education and gai…
…
continue reading

1
CvCISO Podcast Episode 34: Routines and Habits
52:26
52:26
Play later
Play later
Lists
Like
Liked
52:26Summary In this episode, the speakers explore various themes surrounding self-care, routines, and habits. They discuss the importance of embracing natural beauty, the significance of hydration and morning rituals, and the symbolism behind daily habits like showering. The conversation also delves into the social aspects of habits, particularly focus…
…
continue reading

1
CvCISO Podcast Episode 33: Navigating the Assessment Landscape Pt 3
56:50
56:50
Play later
Play later
Lists
Like
Liked
56:50Summary In this episode of the CvCISO Podcast, the hosts engage in a light-hearted conversation that transitions into a serious discussion about access control policies, the role of IT in managing access, and the importance of user account reviews. They explore the risks associated with shared accounts and the significance of system and service acc…
…
continue reading

1
CvCISO Podcast Episode 32: Navigating the Assessment Landscape Pt 2
54:10
54:10
Play later
Play later
Lists
Like
Liked
54:10Summary In this episode of the CvCISO Podcast, the hosts continue their assessment discussion, focusing on the roles of CEO, CFO, and VC. They explore the importance of separation of duties, risk management, and the impact of experience on wisdom. The conversation transitions into the assessment process, covering topics such as screening and backgr…
…
continue reading

1
CvCISO Podcast Episode 31: Navigating the Assessment Landscape Pt 1
52:16
52:16
Play later
Play later
Lists
Like
Liked
52:16Summary In this episode, the hosts engage in a mock assessment to explore the intricacies of conducting information security assessments. They discuss the importance of understanding risk management, setting expectations, and building rapport with clients. The conversation highlights the human factors involved in assessments, the significance of ad…
…
continue reading

1
CvCISO Podcast Episode 30: Tips and Tricks for Your First Assessment
40:25
40:25
Play later
Play later
Lists
Like
Liked
40:25Summary In this episode, the hosts share insights on overcoming intimidation, the value of community support, and practical tips for new assessors to build confidence and improve their skills. The conversation emphasizes the significance of being oneself and learning from experiences, even when they feel uncomfortable. In this engaging conversation…
…
continue reading

1
Episode 29: Keeping it Real - The Scary Side of vCISO Work
40:25
40:25
Play later
Play later
Lists
Like
Liked
40:25Summary In this episode, the hosts discuss the scary aspects of being a Virtual Chief Information Security Officer (vCISO), including the challenges of limited control and high accountability, navigating client expectations, and the constantly shifting threat landscape. They emphasize the importance of understanding roles and responsibilities, comb…
…
continue reading
Summary In this episode, the hosts engage in a lively discussion about various statements related to cybersecurity, exploring whether they are truths or myths. They delve into the costs associated with cybersecurity, the role of VCISOs, the importance of communication in cybersecurity, and the relevance of the CVCISO course. The conversation emphas…
…
continue reading

1
Episode 27: Handling Objections as a vCISO
59:59
59:59
Play later
Play later
Lists
Like
Liked
59:59SUMMARY In this episode of the CvCISO Podcast, hosts Evan, Jordon, and Meg engage in a lively discussion about overcoming objections in vCISO consulting, the importance of framing security in business terms, and leveraging data to support their recommendations. They also touch on personal challenges and the role of emotional intelligence in navigat…
…
continue reading

1
Episode 26: Is the CVCISO Program Credible?
1:08:57
1:08:57
Play later
Play later
Lists
Like
Liked
1:08:57In this episode, Jordon, Meg, and Evan discuss the credibility of the CvCISO certification with special guest Lyle Melnychuk. They explore the value of the certification, the importance of community support, and the real-world application of the training. The conversation delves into the distinction between credibility and recognition, emphasizing …
…
continue reading

1
Episode 25: Understanding the Role of vCISO
1:00:52
1:00:52
Play later
Play later
Lists
Like
Liked
1:00:52In this episode of the CvCISO Podcast, hosts Evan, Meg, and Jordon engage in a candid discussion about mental health, the role of a Virtual Chief Information Security Officer (vCISO), and the critical distinction between compliance and risk management in information security. They explore the importance of understanding security risks, the misconce…
…
continue reading

1
Episode 24: Communication, Trust, and Authenticity
54:34
54:34
Play later
Play later
Lists
Like
Liked
54:34In this episode, the Evan, Meg, and Jordon engage in a deep conversation about the importance of communication, trust, and authenticity in both personal and professional relationships. They explore how understanding one's audience and being aware of the impact of words can enhance interactions. The discussion emphasizes the need for vulnerability, …
…
continue reading

1
Episode 23: Radical Acceptance and Mental Health
37:30
37:30
Play later
Play later
Lists
Like
Liked
37:30In Episode 23 of the CvCISO Podcast, hosts Meg, Evan, and Jordon discuss the concept of radical acceptance and its implications for mental health. They explore how radical acceptance can help individuals cope with their realities, the stigma surrounding mental health, and the importance of self-acceptance. The conversation also touches on the diffe…
…
continue reading

1
Episode 22: Recent S2 Changes & Clarifying InfoSec Definitions
1:09:29
1:09:29
Play later
Play later
Lists
Like
Liked
1:09:29In this conversation, Evan, Jordon, and Meg discuss the recent changes at Security Studio and attempt to define some common information security terms/buzzwords. This is Jordon's topic this week, and he decided to play a game of sorts. He chooses a common information security term or buzzword, Evan and Meg give their definitions of the term/buzzwor…
…
continue reading

1
Episode 21: Events, Incidents, Breaches, and Compromises
55:19
55:19
Play later
Play later
Lists
Like
Liked
55:19Join hosts Evan, Meg, and Jordon in this engaging episode of the CvCISO Podcast as they explore critical topics in information security, including the definitions and distinctions between events, incidents, breaches, and compromises, and how aligning these definitions with clients and stakeholders is vital for clear communication. The discussion mo…
…
continue reading

1
Episode 20: Taking the Non-Technical Path
58:20
58:20
Play later
Play later
Lists
Like
Liked
58:20In this episode of the CvCISO Podcast, Evan and Meg sit down with Sonal Chandler, founder of Minerva Consulting, to discuss her journey into cybersecurity as a non-technical professional. Sonal shares how she built credibility through certifications and emphasizes the value of diverse perspectives in the industry. The conversation covers key topics…
…
continue reading
In this episode of the CvCISO Podcast, hosts Meg, Jordon, and Evan explore how likability plays a crucial role in building strong relationships. They discuss essential strategies such as active listening, being fully engaged, and showing authentic interest in others. The episode also highlights the impact of body language, the importance of authent…
…
continue reading

1
Episode 18: CvCISO Training Program Plans & Updates
1:01:10
1:01:10
Play later
Play later
Lists
Like
Liked
1:01:10In this episode, Jordon, Evan, and Meg cover a range of topics, from personal hobbies like attending concerts, painting, fishing, and watching dog movies, to Evan’s plans for a puppy party while his wife is away. They also dive into important updates within the CvCISO community, discussing the creation of a LinkedIn group, potential quarterly meetu…
…
continue reading

1
Episode 17: Finding Your Niche in the Cybersecurity Industry
1:05:31
1:05:31
Play later
Play later
Lists
Like
Liked
1:05:31In this episode, our hosts sit down with cybersecurity experts Lyle Melnychuk and Brian Gibbs to discuss their journeys from traditional IT roles to cybersecurity leadership. They delve into the challenges of making this transition, the critical role of trust and client service, and the necessity of a strong cybersecurity foundation. The discussion…
…
continue reading

1
Episode 16: The Power of Mentorship & Community in Cybersecurity
46:14
46:14
Play later
Play later
Lists
Like
Liked
46:14In this episode, our hosts and special guests explore the crucial role of mentorship and community in the cybersecurity industry. They address the challenges faced when transitioning from IT to InfoSec, emphasizing the importance of support, transparency, and vulnerability. Discover how local chapters provide a supportive environment for cybersecur…
…
continue reading

1
Episode 15: The Challenges and Rewards of Being a Virtual CISO
1:03:44
1:03:44
Play later
Play later
Lists
Like
Liked
1:03:44In this episode, Evan Francen and Meg Perron sit down with Greg Schaffer, a seasoned virtual Chief Information Security Officer (vCISO) and the host of the Virtual CISO Podcast. Together, they delve into the critical pillars of trust, credibility, and likability in the cybersecurity industry. Greg shares his inspiring journey from a network enginee…
…
continue reading