Skip to content
CISO Series Podcast podcast artwork

PODCAST · technology

CISO Series Podcast

by David Spark, Mike Johnson, and Andy Ellis

Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else.

Publisher-supplied feed metadata · PodParley refreshed Oct 14, 2026 · Source feed

Episodes

  1. I Sent the AI a Strongly Worded Prompt. I Think We'll Be Fine.

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Chad Rubin, svp cybersecurity, Publicis Re:Sources. In this episode: Getting started beats getting it perfect Bring security in...

  2. Data Is the New Oil, in That It's Useless Until You Refine It

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Jake Lorz, vp information technology and CISO, Cintas. In this episode: Security's identity crisis The AI that never has a…

    more
  3. Mirror, Mirror on the Wall, Who Has the Best Infrastructure of Them All?

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, the producer of CISO Series, and Geoff Belknap. Joining us is our sponsored guest Ryan Lloyd, chief product officer, GuardSquare. In this episode: Determinism was never the point Every MCP server is...

  4. Our AI Agents Are So Safe and Reliable You Can't Buy Insurance for Them

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Aaron Stanley, former vp of security, DBT Labs. In this episode: Saying no just hides the agent Communication is not a side...

  5. BONUS EPISODE: Super Cyber Friday Express - Hacking Vendor Selection

    All links and images can be found on CISO Series This is a bonus episode of our brand new podcast, Super Cyber Friday Express — a 20-minute highlight version of our live one-hour show we do every available Friday at 1 p.m. Eastern. In this episode, David Spark is joined by Karl Mattson, founder…

    more
  6. We Strongly Value Your Willingness to Accept Less

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Gina Ciavarro, former managing director of infrastructure and CISO at Accordion. In this episode: Patching won't evict a...

  7. Backlogs? Where We're Going We Don't Need Backlogs.

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Steve Zalewski. Joining us is Varsha Agrawal, head of information security, Prosper Marketplace. In this episode: Lock-in was never about the tech The board wants a green...

  8. When Frameworks Stop Being Polite and Start Getting Real

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Will Gregorian, CISO, Galileo Medical. Joining us is Ryan Brown, director and head of cybersecurity operations, Children's National Hospital. In this episode: Policy is...

  9. "Ignorance Is Bliss" Is Our Acceptable Use Policy

    http://www.Threatlocker.com/cisoAll links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Edward Contreras, senior evp and CISO, Frost Bank. Joining is sponsored guest Rob Allen, chief product officer, ThreatLocker. In this episode:...

  10. Secure by Design. Ignored by Default.

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Julie Davila, president, Security Tinkerers. In this episode: Two paths, one dead end One size fits nobody Own it or orphan it The...

  11. Why Solve Your Problems When We Can Just Scare You?

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is Nada Noaman, SVP and CISO, Estee Lauder Companies. In this episode: Skipping the apprenticeship Privileged users nobody manages...

  12. See, Our Compliance Framework Includes a Checkbox for Resilience

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining us is our sponsored guest, Khush Kashyap, senior director of GRC at Vanta. In this episode: Running up the token meter Some risks…

    more
  13. Why Don't You Tell Me Which Metrics Sound Most Impressive?

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Pavi Ramamurthy, Global CISO and CIO, Blackhawk Network. In this episode: Numbers that make the board feel good and nothing else...

  14. With AI, I Can Now Be Pulled in 5x More Directions at Once!

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining is our sponsored guest, Brian Long, CEO, Adaptive Security. In this episode: Nobody clocks out anymore The rules nobody wrote down are...

  15. The Only Thing Worse Than Technical Debt is Newly Discovered Technical Debt

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining them is Tim Callahan, CIO/CISO, AFLAC. In this episode: Week one is the wrong time to overreach Nobody has the AI playbook…

    more
  16. What Part of Zero Trust Does Your Exception Not Understand?

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining is Patti Degnan, operating partner, Andreessen Horowitz. In this episode: Identity built for one person at a time Patching can't…

    more
  17. These Aren't Speed Bumps, They're Opportunity Ramps! (LIVE in NYC)

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Nick Vigier, CISO, Oscar Health. Joining is our sponsored guest, Mitchem Boles, field CTO, Intezer. This episode was recorded live at Intezer's AI SOC event held at the…

    more
  18. It's Not That We Don't Value Your Experience, We Just Don't Want to Pay for It

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Megan Samford, vp product and supply chain security, Schneider Electric. In this episode: Two modes of CISO The vendor has the keys...

  19. Boards Love to Hear Jargon," Says Soon-to-Be-Fired CISO (LIVE in Boston)

    All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Dmitriy Sokolovskiy, senior vice president, information security, Semrush. This episode was recorded in front of a live...

  20. There's Nothing an LLM Can Screw Up That the Cloud Didn't Do First

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is our sponsored guest, Danny Jenkins, CEO, ThreatLocker. In this episode: Permission creep at machine speed The pattern we keep…

    more
  21. Our Data Security Policy Is Transparent in That It Doesn't Exist

    Our Data Security Policy Is Transparent in That It Doesn't Exist All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining is Mike Melo, CISO, TMX Group. In this episode: The weight of old…

    more
  22. If You Love Cloud Misconfigurations So Much, Why Don't You Marry Them!

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining them is their sponsored guest Amit Megiddo, CEO and founder, Native. In this episode: The CISO you don't need Misconfigurations aren't…

    more
  23. Why Be Responsible When We Can Just Blame AI?

    All links and images can be found on CISO Series This week's CISO Series Podcast features David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining us is our sponsored guest, Jadee Hanson, CISO, Vanta. In this episode: The compliance receipt nobody reads Who signs off on…

    more
  24. Can You Please Train the AI on Your Way Out the Door?

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining is Jean-Paul Calabio, vp and CISO, Grainger. In this episode: Scanning the map isn't securing the territory CFOs don't fund faith What…

    more
  25. AI Confidence: It's a Trap! (LIVE in San Francisco)

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining is Sara Madden, CISO, Convera. This episode was recorded live at BSidesSF 2026. In this episode: Playing vendor roulette Confident and…

    more
  26. Step 1: Deploy New AI Tool. Step 2: Discover Security Flaws. Step 3: Repeat. (LIVE in Orlando)

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Michelle Wilson, CISO, Movement Mortgage. Joining is sponsored guest Rob Allen, chief product officer, ThreatLocker. This show was recorded in front of a live audience at...

  27. Back in My Day, You Could Get a Cybersecurity Job at the Corner Store

    All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Paul Drapeau, head of global information security, New Balance. In this episode: The logo trap Immunity through exposure The…

    more
  28. Our Theoretical Controls Work Great Against Hypothetical Attacks

    Our Theoretical Controls Work Great Against Hypothetical Attacks All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is David Nolan, former CISO, Asurion. In this episode: Influence, not...

  29. Remember, Every Underappreciated Risk Is Just a Crisis Waiting to Be Discovered

    All links and images can be found on CISO Series. This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Hilik Kotler, svp, CISO and IT, Expedia Group. In this episode: The numbers game What makes a vendor worth your time…

    more
  30. Do You Think These Compliance Boxes Check Themselves? (LIVE in Clearwater, FL)

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Pam Lindemoen, CSO, vp of strategy, Retail and Hospitality-ISAC. Joining them is Jason Mayor, deputy CISO, Raymond James Financial. This episode was recorded in front of a...

  31. Why Highlight Diversity When We Can Just Hope You Don't Notice?

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining is Julie Myerholtz, CISO, Brunswick Corporation. In this episode: Your cloud, your problem Kill your sacred cows AI broke your vendor…

    more
  32. They're Less "Best Practices" and More "Sounds Good on LinkedIn"

    All links and images can be found on CISO Series. This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is Rebecca Harness, CISO, Deltek. In this episode: Let it fail The CIO seat is empty. Now what? Design for how people actually...

  33. It's Okay to Put All Your Eggs in One Basket as Long as You Really Trust the Basket

    All links and images can be found on CISO Series. This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is our sponsored guest, Rob Allen, chief product officer, ThreatLocker. In this episode: Your best employee is your biggest…

    more
  34. Our Security Team's Love Language is Buying New Tools

    All links and images can be found on CISO Series. This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining us is our sponsored guest, Tim Leehealey, vp of corporate strategy and operations, Strike48. In this episode: Defensible, not...

  35. If We Can't Do Better, at Least Do It Faster

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining them is Vikas Mahajan, vp and CISO, American Red Cross. In this episode: Questionnaires aren't risk management The good old days were...

  36. We Gave the CISO Risk and Liability, and Now They Want Authority. The Nerve.

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Steve Zalewski. Joining them is Tammy Klotz, CISO, Trinseo. In this episode: Accountability without authority Kill your hacklore Voice is no longer enough Studies that tell…

    more
  37. When We See White Smoke, We Know We Have a New CISO

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining them is Russ Ayres, CISO, Principal Financial Group. In this episode: Metrics that matter Tool babysitting problem Automating the...

  38. Take Two-Factor Authentication and Call Me in the Morning

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining them is Janet Heins, CISO, ChenMed. In this episode: Inbound gets ignored Independence under constraint Methodology means nothing…

    more
  39. I'll Show You Our Resilience Plan Once Our Cloud Storage Is Back Online

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining them is Johann Balaguer, Global CISO, Hard Rock Hotels and Casinos. In this episode: Understanding the why Own your digital self Invest...

  40. AI Is Very Efficient at Making Us Forget the Value of Humans

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining them is Sara Madden, CISO, Convera. In this episode: Hold developers accountable Credibility through candor Be strategic with AI...

  41. Managing Risk Has Been a Priority Ever Since You Asked About It (LIVE in NYC)

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Matthew Southworth, CSO, Priceline. Joining them is sponsored guest, Saket Modi, CEO, Safe Security. This episode was recorded live at FAIRCON25 in NYC. In this episode: AI...

  42. Imagine Scaling Mistakes 5x Faster. Thank You, Automation! (LIVE in NY)

    All links and images can be found on CISO Series. This week's episode is hosted by me, David Spark, producer of CISO Series and Matt Southworth, CISO, Priceline. Joining us is our sponsored guest, Leslie Nielsen, CISO, Mimecast. In this episode: Automating dysfunction Leading without dominating...

  43. How Much Risk Would a CISO Risk if a CISO Could Risk Risk? (LIVE in Boca Raton)

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Brett Conlon, CISO, American Century Investments. Joining them are Ryan Barras, CISO, Mount Sinai Medical Center. In this episode: Nobody understands what we do Someone else...

  44. I'm Worried That We're Not Worried About the Right Worries With AI

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Mike Johnson, CISO, Rivian. Joining them is their sponsored guest, Danny Jenkins, CEO, ThreatLocker. In this episode: AI for AI's sake Stop selling, start protecting Stop...

  45. You Can't Fall Behind in AI if You Never Start

    All links and images can be found on CISO Series. This week's episode is hosted by me, David Spark, producer of CISO Series, and Mike Johnson, CISO, Rivian. Joining us is John Barrow, CISO, JB Poindexter & Co. In this episode: Building unicorns, not hunting them Cold War frameworks for modern...

  46. Why Architect for Human Error When We Can Make People Feel Really Bad About It?

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal of Duha. Joining them is Richard Rushing, CISO, Motorola Mobility. In this episode Mindset over tools When hygiene becomes risk Systems for...

  47. Are You Implying This Line Graph Isn't a Compelling Cybersecurity Narrative?

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal of Duha. Joining them is our sponsored guest, Nathan Hunstad, director, security, Vanta. In this episode: Metrics that matter Testing for…

    more
  48. Our CISO Certainly Puts the Tool in Multi-Tool (LIVE in LA)

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Jeff Steadman, deputy CISO, Corning Incorporated. Joining them is Quincey Collins, CSO, Sheppard Mullin. This episode was recorded live at the ISSA LA Summit in Santa…

    more
  49. I Don't Just Guess About Effectiveness, I Make Educated Guesses!

    All links and images can be found on CISO Series. This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis (@csoandy), principal of Duha. Joining us is Sara Madden, CISO, Convera. In this episode: Optimizing for reality, not idealism Engineering governance instead…

    more
  50. It's a Little Hard to Evaluate New Solutions When You're Screaming "AI" at Me All the Time (Live in Houston)

    All links and images can be found on CISO Series. This week's episode is hosted by David Spark, producer of CISO Series and Jerich Beason, CISO, WM. Joining them on stage is Jack Leidecker, CISO, Gong. This episode was recorded live at HOU SEC CON 2025. In this episode: The open source...

Type above to search every episode's transcript for a word or phrase. Matches are scoped to this podcast.

Searching…

We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.

No matches for "" in this podcast's transcripts.

Showing of matches

No topics indexed yet for this podcast.

Loading reviews...

ABOUT THIS SHOW

Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else.

HOSTED BY

David Spark, Mike Johnson, and Andy Ellis

Produced by David Spark

CATEGORIES

Frequently Asked Questions

How many episodes does CISO Series Podcast have?

CISO Series Podcast currently has 428 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.

What is CISO Series Podcast about?

Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else.

How often does CISO Series Podcast release new episodes?

CISO Series Podcast publishes regularly with 428 episodes available. Check the episode list for the typical release schedule.

Where can I listen to CISO Series Podcast?

You can listen to CISO Series Podcast on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.

Who hosts CISO Series Podcast?

CISO Series Podcast is created and hosted by David Spark, Mike Johnson, and Andy Ellis.
URL copied to clipboard!