S6 E9 Should the CISO work for the CIO?

#SecurityConfidential #DarkRhinoSecurity Greg Schaffer joins us on this episode of Security Confidential. Greg founded vCISO services in 2017 to help SMBs. He has over 33 years of experience in IT and security including over 15 years at the CISO level. Greg is the host of the virtual CISO moment podcast and authored information security for small and mid-sized businesses. 00:00 introduction 01:37 How did you get into Cyber? 04:40 What brought you to SMB? 07:00 Equifax Breach 10:30 Defense in Depth 13:05 Doing more than just checking the boxes 19:40 Cyber insurance 24:00 Some ways SMBs get breached 28:00 Ransomware 30:40 SMB: What to do if you don’t have the resources? 36:44 How much money should SMBs spend on cybersecurity? 38:24 Should the CISO work for the CIO? 42:17 Metrics for decision-makers 45:20 Russians and the Chinese 49:00 Meeting Greg CU Intersect conference is July 18-20. Link https://cuintersect.com/ RETR3AT Link: https://www.montreat.edu/about/events/retr3at/ Greg's podcast: https://virtual-ciso.us/ Gregs Book: https://www.amazon.com/Information-Security-Small-Midsized-Businesses/dp/1733066845/ To learn more about Greg visit https://www.linkedin.com/in/gregoryschaffer/ To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio! Instagram: https://www.instagram.com/securityconfidential/ Facebook: https://m.facebook.com/Dark-Rhino-Security-Inc-105978998396396/ Twitter: https://twitter.com/darkrhinosec LinkedIn: https://www.linkedin.com/company/dark-rhino-security Youtube: https://www.youtube.com/channel/UCs6R-jX06_TDlFrnv-uyy0w/videos