"No Trust" by Zero Trust Forum

In this episode, Evgeniy Karam joins the No Trust podcast team live at Black Hat in Las Vegas for a quick-fire conversation about AI, cybersecurity hype, emerging vendors and the challenges of cutting through the noise. Evgeniy shares how he evaluates new security technologies, including why vendors should be able to explain in plain English what problem they solve, how they solve it and where they might fail. The conversation also explores why much of the AI security debate ultimately comes back to data protection and understanding the crown jewels organisations actually need to protect. The team also discusses the pressure to adopt AI without clearly defined business outcomes, why AI isn't magic, and the importance of understanding where it genuinely adds value. Evgeniy finishes with advice for people entering cybersecurity, choosing the right conferences and continuing to learn as the industry evolves. Key Takeaways: • Black Hat is packed with new vendors, but don’t judge a company by its booth or its marketing. • Ask vendors to explain in plain English what problem they solve and how they solve it. • A great question for any vendor is: what would make your technology fail in a POC? • AI security gets the headlines, but much of the real challenge still comes back to protecting data. • Organisations need to understand their crown jewels, why they matter and what happens if they become unavailable. • Security should protect business outcomes, not simply deploy more controls. • AI needs a defined business problem, not just a mandate from the board. • AI isn’t magic. Organisations need to understand where it genuinely adds value. • If you’re starting in cybersecurity, smaller events and communities can sometimes offer more value than Black Hat. • Whatever conference you attend, go with a plan or the sheer volume of information can quickly become overwhelming. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn [www.linkedin.com/company/zero-trust-forum/](http://www.linkedin.com/company/zero-trust-forum/). Follow Jaye Tillson on LinkedIn - [www.linkedin.com/in/jaye-tillson/](http://www.linkedin.com/in/jaye-tillson/) Follow John Spiegel on LinkedIn - [www.linkedin.com/in/john-spiegel-2011543/](http://www.linkedin.com/in/john-spiegel-2011543/)

In this episode, Ginny Yon joins the No Trust podcast team live at Black Hat in Las Vegas to discuss how Hacker Summer Camp is evolving, the explosion of AI and agentic security, and why separating genuine innovation from hype is becoming increasingly difficult. The conversation explores how AI is accelerating cybersecurity startups and product development, why security leaders may need to make smaller and more calculated technology bets, and why understanding the company behind the technology is becoming just as important as evaluating the product itself. Ginny also shares her advice for getting the most from Black Hat, the importance of community and those unexpected hallway conversations, and why the next generation of cybersecurity professionals still needs strong foundations alongside an understanding of AI. And, because it’s the No Trust podcast, there’s also time for oysters, mussels and the inevitable pineapple on pizza debate. Key Takeaways: • Black Hat is about the people and community as much as the technology. • Go with a plan, but leave space for unexpected conversations and connections. • AI and agentic security are everywhere, but separating innovation from hype is getting harder. • AI is dramatically reducing the time it takes to build and launch new cybersecurity products. • Security leaders need to understand the company behind the technology, not just the product. • Smaller, calculated technology bets may make more sense in a rapidly changing market. • Start with the problem you need to solve, not the latest AI terminology. • Waiting for the AI security market to settle carries its own risk. • AI is becoming a foundational cybersecurity skill, but traditional security disciplines still matter. • Find the area of cybersecurity you enjoy, build strong foundations and keep learning. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about? It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn [www.linkedin.com/company/zero-trust-forum/](http://www.linkedin.com/company/zero-trust-forum/). Follow Jaye Tillson on LinkedIn - [www.linkedin.com/in/jaye-tillson/](http://www.linkedin.com/in/jaye-tillson/) Follow John Spiegel on LinkedIn - [www.linkedin.com/in/john-spiegel-2011543/](http://www.linkedin.com/in/john-spiegel-2011543/)

In this episode, Trey Ford joins the No Trust podcast team at Black Hat in Las Vegas to discuss how cybersecurity is evolving as AI accelerates software development, vulnerability discovery, and the speed of both attack and defence. Drawing on decades of experience across offensive security, vulnerability research, and the Black Hat community, Trey shares his perspective on how the industry has changed, why the next 18–36 months could bring a significant increase in vulnerabilities, and why AI will allow us to make both good and bad decisions at machine speed. The conversation explores AI-generated code, vulnerability management, open-source security, human oversight, patching pressure, and why strong foundations in networking, troubleshooting, debugging, and systems thinking will become even more important as AI takes on more of the traditional technical workload. The episode also looks at the changing career path into cybersecurity, the importance of being able to think beyond individual technologies and vulnerabilities, and why Black Hat remains as much about people, relationships, and community as it is about research and technology. Key Takeaways: • Black Hat is about the people and community as much as the research and technology. • Go to Black Hat with a purpose, but leave enough space for unexpected conversations and connections. • The smaller vendors, startups, and researchers are often where you find the most interesting innovation. • AI will let us work at machine speed, but it will also allow us to make bad decisions at machine speed. • Human oversight, challenge and validation will remain critical as AI becomes more autonomous. • The next 18–36 months could bring a significant increase in vulnerabilities as AI accelerates software development. • Faster exploitation means organisations will increasingly have to balance the risk of patching quickly against the risk of waiting. • Cybersecurity professionals need strong foundations in networking, systems, troubleshooting and debugging, not just specialist skills. • The future belongs to people who can think across systems and understand how technology, security and business connect. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Howard Holton joins the No Trust podcast team to discuss why AI is exposing long standing weaknesses across cybersecurity, identity, and IT operations. Drawing on decades of experience as a CIO, CTO, and CISO, Howard shares practical insights into why organisations continue to struggle with security fundamentals, how technical debt has created massive hidden risk, and why AI is accelerating the impact of those problems rather than creating entirely new ones. The conversation explores identity hygiene, least privilege access, blast radius reduction, Zero Trust principles, board level accountability, and the growing gap between business speed and secure delivery. The episode also looks at why organisations need to rethink culture, governance, and leadership if they want to build sustainable security strategies in the AI era. Key Takeaways: • AI is exposing years of poor security hygiene. • Identity and access control matter more than ever. • Technical debt is becoming a major security risk. • AI increases the speed and scale of attacks. • Businesses still prioritise speed over security. • Least privilege is critical in the AI era. • Zero Trust helps reduce blast radius. • Security must become part of doing things right. • Boards need stronger cybersecurity understanding. • Organisations need time to clean up legacy issues. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Gina Yacone joins Jaye Tillson and John Spiegel to discuss the latest trends in cybersecurity, Zero Trust, AI, identity, vulnerability management, and the evolving industry landscape. The conversation explores how organisations are being forced to rethink security because of rising cyber threats, AI-driven attacks, regulatory pressure, and the growing importance of business-aligned cybersecurity leadership. They also share practical insights on reducing attack surface, managing technical debt, preparing for quantum risks, securing AI adoption, and why modern CISOs must increasingly speak the language of the business rather than just technology. Key Takeaways: • Zero Trust is moving from buzzword to business necessity. • Identity is back at the centre of serious security conversations. • Zero Trust is about reducing blast radius, not pretending breaches will never happen. • AI is helping attackers move faster, scale better, and make fewer mistakes. • Defenders need AI too, but adoption and operationalisation are still hard. • Vulnerability management must move from counting CVEs to understanding real exposure. • CTEM is changing how organisations prioritise risk and patching. • Quantum readiness should start now with simple assessments and crypto visibility. • CISOs need to speak business language, not just technical language. • Secure AI, data governance, and SDLC controls are becoming urgent priorities. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Sarah Thaler shares expert insights on the behind-the-scenes planning and execution of trade show booths, especially at RSA. Discover how to maximize your presence, create engaging experiences, and avoid common pitfalls at major cybersecurity conferences. Key Takeaways: • Plan RSA nearly a year in advance • Align booth messaging with business goals • Design booths to create engagement, not just visibility • Train booth staff to start strong conversations • Match booth size and location to your objectives • Use demos and experiences to attract crowds • Avoid vague messaging and passive booths • Plan your time and meetings to maximize value • Manage energy during long conference days • Networking events often create the biggest opportunities Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jacob Friedman, Strategic Account Director at ThreeTree, shares insights on the current state of cybersecurity, startup evaluation, and tips for navigating the RSA conference. Discover how to cut through industry noise, evaluate emerging tools, and build successful vendor relationships. Key Takeaways: • Bigger security budgets do not automatically make organisations safer. • AI hype does not replace architectural discipline. • The best startups solve real problems, not buzzwords. • Clean, classified data creates business value, not just risk reduction. • RSA should be a strategy mission, not a swag tour. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode of the No Trust podcast, Chase Cunningham discusses the evolution of Zero Trust, reflecting on the growth and challenges faced in 2025 and looking ahead to 2026. The conversation covers the hype cycle of Zero Trust, the importance of leadership in strategy implementation, the need for cultural shifts, and the metrics that matter in measuring success. The discussion also touches on the role of AI in cybersecurity and the future of Zero Trust as a standard practice in organizations. Key Takeaways: • 2025 was a year of significant international growth for Zero Trust. • The Zero Trust hype cycle has transitioned to a phase of practicality. • Leadership is crucial for the continuous execution of Zero Trust strategies. • Organizations often misinterpret Zero Trust as a completed project rather than an ongoing strategy. • Incentives in cybersecurity need to shift from punitive measures to positive reinforcement. • Cultural challenges in adopting Zero Trust can hinder its effectiveness. • Metrics should focus on real-world outcomes rather than superficial statistics. • Zero Trust is becoming a necessary standard for modern businesses. • Technical debt poses a significant challenge for legacy organizations in adopting Zero Trust. • The future of Zero Trust will likely see it integrated as a default practice in new organizations. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode of the No Trust podcast, John Spiegel engages with cybersecurity expert Joshua Copeland, who shares his insights on the fundamental flaws in the cybersecurity landscape. They discuss the leadership vacuum in the industry, the pitfalls of compliance theater, and the overwhelming vendor hype that complicates tool selection. Joshua emphasizes the need for a proactive approach to security, aligning cybersecurity with business objectives, and the importance of effective communication with leadership. The conversation culminates in actionable takeaways for cybersecurity leaders looking to improve their strategies and outcomes. Key Takeaways: • Cybersecurity has a leadership vacuum that needs addressing. • Compliance does not equate to security; it's often just theater. • Organizations suffer from tool sprawl and lack of strategy. • Vendor hype can distort risk perception and lead to poor decisions. • Security leaders must communicate in business terms to gain support. • Proactive security measures can prevent costly breaches. • Understanding the business is crucial for effective cybersecurity leadership. • Cybersecurity can be a revenue-generating function if aligned with business goals. • Leverage existing tools before chasing new ones. • Focus on redesigning critical processes for better security outcomes. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Den Jones shares his journey from Scotland to becoming a prominent figure in cybersecurity, discussing the evolving role of the CISO, the skills gap, and the importance of accountability. He emphasizes the need for effective communication with executives and the challenges posed by legacy systems. Den also reflects on leadership lessons learned from past mistakes and provides insights into implementing Zero Trust strategies. The conversation concludes with advice for aspiring leaders and a light-hearted discussion about food. Key Takeaways: • Den Jones shares his journey from Scotland to the US. • The role of the CISO has evolved significantly in recent years. • CISOs face increasing accountability and regulatory pressures. • There is a skills gap in cybersecurity, often due to employer expectations. • Legacy systems pose significant challenges for security teams. • Effective communication with executives is crucial for success. • Celebrating small wins can motivate teams and improve morale. • Zero Trust implementation requires understanding the audience's needs. • Leadership involves learning from mistakes and seeking mentorship. • The future of the CISO role may involve blending with CIO responsibilities. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John welcome Jerry Chapman, a leading expert in Zero Trust security. They discuss Jerry's journey into cybersecurity, the misconceptions surrounding Zero Trust, and the importance of understanding it as a journey rather than a one-time project. Jerry shares insights on the Zero Trust blueprint, which consists of four phases: readiness, assessment, strategy, and metrics. The conversation also delves into the challenges organizations face in implementing Zero Trust, the significance of user experience, and the need for continuous iteration and learning. Jerry emphasizes that data and application security are often the weakest areas in organizations and highlights the importance of evaluating current capabilities to start the Zero Trust journey effectively. Key Takeaways: • Zero Trust is a journey, not a one-time project. • Misconceptions about Zero Trust often focus on technology rather than process. • Organizations need to assess their readiness for Zero Trust implementation. • The Zero Trust blueprint consists of four phases: readiness, assessment, strategy, and metrics. • Understanding business assets and protect surfaces is crucial for Zero Trust. • Data and application security are often the weakest areas in organizations. • Organizations can start their Zero Trust journey without having everything in place. • User experience is critical in the adoption of Zero Trust principles. • Metrics for success in Zero Trust implementation can be challenging to define. • Continuous iteration and learning from customer interactions are essential for improving the Zero Trust framework. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye Tillson and John Spiegel engage with Jason Garbis of Numberline Security to explore the often misunderstood concept of Zero Trust and its associated maturity models. They discuss the importance of viewing Zero Trust as a strategy rather than a mere technology, emphasizing the need for cultural change within organizations. The conversation delves into common misconceptions, the role of maturity models in assessing security posture, and the necessity of engaging stakeholders beyond IT and security teams. Jason shares insights on how to effectively communicate Zero Trust initiatives to procurement teams and the complexities of measuring success in these initiatives. The episode concludes with a discussion on the continuous journey of Zero Trust adoption and the importance of embedding security by design in organizational processes. Key Takeaways: • Zero Trust is a strategy, not just a technology. • Maturity models help organizations assess their security posture. • Common misconceptions include viewing Zero Trust as a product to buy. • Successful Zero Trust implementation requires cultural change. • Engaging stakeholders outside of IT is crucial for success. • Zero Trust should be embedded in organizational processes. • Communication with procurement teams is essential for effective vendor evaluation. • Measuring success in Zero Trust initiatives is complex but necessary. • Continuous improvement is key in Zero Trust adoption. • Zero Trust is a journey, not a destination. Follow & Subscribe on all Podcast platforms. What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode Jaye Tillson and John Spiegel engage with Richard Bird, a seasoned cybersecurity expert, to discuss the evolving landscape of Zero Trust and identity management. Richard shares his unique journey from a small-town upbringing to becoming a chief security officer, emphasizing the importance of mentorship and the need for a paradigm shift in security architecture. The conversation delves into the critical role of identity in cybersecurity, the challenges organizations face in managing identities, and the implications of AI on security practices. Richard offers valuable insights for CISOs and CIOs, urging them to address persistent unearned trust within their systems. The episode concludes with light-hearted discussions about personal experiences and the significance of travel in broadening perspectives. Key Takeaways: • Richard Bird emphasizes the importance of mentorship in career development. • Zero Trust requires a fundamental rethink of security architecture. • Identity management is a critical component of cybersecurity. • Persistent unearned trust poses significant risks to organizations. • Contextual data is essential for effective identity management. • AI is reshaping the landscape of cybersecurity and identity management. • Organizations must recognize the importance of non-human identities. • Traveling can broaden one's perspective and enhance understanding. • Effective identity management requires understanding context and classification. • Cybersecurity solutions must evolve to address the complexities of AI. • Zero Trust principles are essential for managing AI agents. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John discuss the implications of AI agents and the importance of integrating Zero Trust principles into their deployment. Special guest Josh Woodruff shares insights from his upcoming book, emphasizing the need for a security-first approach to AI. The conversation covers the risks associated with autonomous AI, the development of the Agentic Trust Framework, and the cultural shifts necessary for successful AI adoption. Josh also explores the future of AI, including the role of government regulations, quantum computing, and the emergence of new job roles in the AI landscape. Key Takeaways: • AI agents are powerful and autonomous, posing new risks. • Zero Trust principles are essential for managing AI agents. • The Agentic Trust Framework helps govern AI behavior. • Cultural shifts are necessary for successful AI adoption. • AI can elevate human work rather than replace it. • Clear guidelines improve AI agent performance. • Security must evolve alongside technological innovation. • Emerging roles like AI ethicists will become important. • Causal AI will enhance decision-making capabilities. • Embracing AI technology is crucial for future competitiveness. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John engage with George Finney to explore the intersection of Zero Trust principles and AI agents. They discuss the challenges and opportunities presented by AI in cybersecurity, emphasizing the importance of identity management, governance, and the role of humans in overseeing AI systems. The conversation also touches on the future of AI, the necessity of pre-mortems in project planning, and the need for continuous education in cybersecurity. George shares insights from his experience as a CISO and offers advice for leaders navigating the evolving landscape of digital security. Key Takeaways: • AI agents pose significant security challenges. • Zero Trust principles must adapt to include AI. • Identity management is crucial for both humans and AI. • Governance structures are needed for AI oversight. • Investing in people is key to a secure future. • Pre-mortems can help identify potential AI risks. • Human involvement is essential in critical AI decisions. • AI's blending of control and data planes raises security concerns. • Continuous education in cybersecurity is vital for all staff. • The future of AI in cybersecurity is uncertain but requires critical thinking. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John engage with Chase Cunningham, a retired Navy cryptologic chief, to explore the concept of Zero Trust through the lens of military experience. They discuss the importance of situational awareness, effective leadership, and the necessity of building trust within teams. The conversation delves into crisis management, emphasizing the need for flexibility and adaptability in high-pressure situations. They also highlight the significance of after action reviews in learning from both successes and failures, and the critical role of empowered leadership in navigating cybersecurity challenges. Key Takeaways: • The mindset from special ops can enhance cybersecurity strategies. • Situational awareness is crucial in both military and civilian life. • Crisis management requires flexibility and the ability to adapt. • Effective leadership is essential during high-pressure situations. • Building trust within teams is vital for successful operations. • Organizations must have a clear mission to align efforts. • Regular after action reviews can improve response strategies. • Learning from past mistakes is critical to avoid future breaches. • Crisis response should prioritize isolation of threats. • Empowered leadership can facilitate better decision-making during crises. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, the No Trust team speaks with Jennifer Minella about her extensive experience in technology, particularly in wireless security and networking. They discuss the challenges of maintaining security in wireless networks, the evolution of networking technologies, and the complexities of implementing Network Access Control (NAC) in a hybrid work environment. The conversation also touches on the future of Zero Trust architecture, the importance of unique device identity, and the challenges posed by IoT and OT devices. The episode concludes with a light-hearted discussion about whiskey. • Jennifer Minella has over 30 years of experience in technology, focusing on infrastructure and security. • Wireless security protocols have not significantly changed in over 20 years, posing challenges for security professionals. • The majority of Wi-Fi technology is consumer-based, complicating enterprise security efforts. • Understanding the basics of networking is crucial for entering the cybersecurity field today. • NAC implementations are often challenging and can lead to significant operational disruptions. • Zero Trust architecture requires a shift in how organizations approach network security, especially with remote work. • Unique device identity is essential for effective security in IoT and OT environments. • The complexity of modern networks makes it difficult to manage security policies effectively. • The rise of ransomware attacks on IoT devices highlights the need for better security measures. • Whiskey culture provides a fun and engaging way to connect with others in the tech industry. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode of the No Trust Podcast, hosts Jaye Tillson and John Spiegel sit down with John Kindervag, the creator of Zero Trust, to uncover the story behind one of cybersecurity’s most transformative frameworks. Kindervag shares how Zero Trust has gained traction over the past 15 years, the cultural resistance that slowed its adoption, and how organizations can finally break through inertia by starting small and focusing on protecting what matters most. From the boardroom to the SOC, this conversation dismantles the myth that Zero Trust is “all or nothing” and reframes it as a business-driven strategy with measurable outcomes, including reduced operational costs and fewer breaches. Along the way, Kindervag reveals why the C-suite often understands Zero Trust better than technical teams, how misaligned incentives inside organizations hold security back, and why networking at conferences is still one of the best ways to drive change. Whether you’re a CISO, security architect, or business leader, this episode will challenge your assumptions and leave you with a clear, practical path toward Zero Trust. • John Kindervag is the creator of Zero Trust. • Zero Trust took 15 years to gain traction due to resistance to change. • Organizations should start small and protect specific assets. • Cybersecurity must evolve beyond traditional perimeter defenses. • Zero Trust is about protecting sensitive data, not just technology. • Incentives in organizations often hinder the adoption of new security models. • Zero Trust can lead to reduced operational costs and fewer data breaches. • The C-suite often understands Zero Trust better than technical teams. • Conferences provide valuable networking opportunities and insights. • The focus should be on business outcomes, not just technology. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/ Takeaways • Identity is the heart of zero trust. • Most breaches occur due to weak passwords. • Identity is the key to the perimeter. • Assuming trust can lead to vulnerabilities. • Zero trust is a continuous journey. • Organizations need visibility into their identity landscape. • AI can assist in analyzing identity-related data. • Non-human identities are a growing concern. • MFA is essential but not the only solution. • The future of identity management will involve AI. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

From Theory to Practice: The Zero Trust Journey - Episode 2, with John Kindervag and Dr Chase Cunningham by "No Trust" by Zero Trust Forum

In this conversation, Art Ocain discusses the current landscape of cybersecurity threats with the No Trust crew, particularly focusing on ransomware attacks. They explore how attackers gain access to systems, the importance of multi-factor authentication, and the vulnerabilities of small and medium-sized businesses. The conversation delves into immediate actions organizations should take during a ransomware attack, the balance between recovery and forensic investigation, and the critical role of communication during incidents. They also address the ethical dilemma of paying ransoms and share lessons learned from past incidents, emphasizing the need for ongoing security improvements and preparedness for future threats. Takeaways • VPN is currently the main vector for attacks • Small and medium businesses are often less prepared for attacks • Many companies still lack MFA on their VPNs • Organizations often believe they are immune to attacks until it's too late • Hypervisors are a primary target for ransomware attacks • Minimizing the attack surface is crucial for security • Isolating from the internet is a key first step during an attack • The decision to pay ransom is complex and often driven by immediate business needs • A full forensic investigation is essential after an attack • Ransomware trends continue to evolve and are not declining Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/ Takeaways • Identity is the heart of zero trust. • Most breaches occur due to weak passwords. • Identity is the key to the perimeter. • Assuming trust can lead to vulnerabilities. • Zero trust is a continuous journey. • Organizations need visibility into their identity landscape. • AI can assist in analyzing identity-related data. • Non-human identities are a growing concern. • MFA is essential but not the only solution. • The future of identity management will involve AI. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this conversation, David Morimanno and the No Trust crew delve into the critical role of identity in the context of zero trust security. They discuss how identity serves as the new perimeter, the importance of multi-factor authentication, and the challenges organizations face in implementing effective identity management strategies. The conversation also touches on the significance of non-human identities, the potential of AI in enhancing security measures, and the future trends in identity and cybersecurity. Takeaways • Identity is the heart of zero trust. • Most breaches occur due to weak passwords. • Identity is the key to the perimeter. • Assuming trust can lead to vulnerabilities. • Zero trust is a continuous journey. • Organizations need visibility into their identity landscape. • AI can assist in analyzing identity-related data. • Non-human identities are a growing concern. • MFA is essential but not the only solution. • The future of identity management will involve AI. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode of No Trust, Jaye Tillson, John Spiegel, John Kindervag, and Chase Cunningham discuss the evolution and significance of the Zero Trust cybersecurity model. They explore its origins, the pivotal moments that have shaped its adoption, and the importance of aligning organizational culture and leadership with Zero Trust principles. The conversation highlights the need for a strategic approach to cybersecurity that transcends traditional methods, emphasizing the importance of protecting data and assets in a constantly evolving threat landscape. Takeaways • Zero Trust originated from the limitations of traditional security models. • The concept of trust in digital systems is flawed and should be eliminated. • Zero Trust has evolved to address modern cybersecurity threats. • A strategic approach to Zero Trust is essential for effective implementation. • Incentives from leadership can drive the adoption of Zero Trust. • Understanding what to protect is crucial for a successful Zero Trust strategy. • Zero Trust should be seen as a continuous journey, not a one-time project. • Cultural shifts within organizations are necessary for Zero Trust to succeed. • The cybersecurity landscape is constantly changing, requiring ongoing adaptation. • Community engagement and charity initiatives can enhance the mission of cybersecurity professionals. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode of No Trust, Jaye Tillson, John Spiegel and Evgeniy Kharam discuss the key trends and challenges in cybersecurity as they reflect on 2024 and look ahead to 2025. They explore the impact of AI, the evolving startup landscape, the importance of asset management, and the ongoing threat of ransomware. The conversation also touches on the concept of zero trust, the significance of recovery and resilience in cybersecurity, and predictions for the future of the industry. Takeaways • 2024 was a year of reflection and adaptation in cybersecurity • AI has become a dominant buzzword, overshadowing other topics • Startups are facing challenges in raising funds due to market uncertainties • Ransomware remains a significant threat, evolving in its targeting • Zero trust is understood better but is not just a vendor solution • Asset management is critical for effective cybersecurity • Collaboration within the industry is increasing to tackle challenges • The cybersecurity impact on the economy is substantial, nearing $10 trillion • Mergers and acquisitions in cybersecurity are expected to rise in 2025 • Recovery and resilience are as important as protection in cybersecurity Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode of No Trust, Jaye Tillson, and John Spiegel discuss with Chris Denbigh-White his transition back to the corporate world as a CISO after a brief stint in the vendor space. They explore the challenges and benefits of networking at industry conferences, the importance of peer support and information sharing among security leaders, and the evolving security landscape as they look ahead to 2025. The conversation emphasizes the need for organizations to focus on the basics of cybersecurity, the potential role of AI in alleviating mundane tasks, and the necessity of building a solid security foundation before layering on advanced technologies. Takeaways • Transitioning from vendor to CISO brings new challenges • Networking at conferences is crucial for sharing experiences • Peer support groups can provide valuable insights • The security landscape in 2025 will focus on regulation and ransomware • Organizations must prioritize basic cybersecurity practices • AI can assist with mundane cybersecurity tasks • Building a solid foundation is essential for security • Sharing information among peers is becoming more accepted • The basics of cybersecurity are often overlooked for shiny new tools • Effective communication and user education are key to security success Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this engaging conversation with Jaye Tillson and John Spiegel, Cher Fox shares her unique journey from a young programmer to a data fitness coach and public speaker. She discusses the importance of data quality, security, and governance, emphasizing that everyone in an organization shares responsibility for data management. Cher also highlights the challenges of implementing AI and the need for organizations to be prepared before adopting new technologies. Additionally, she addresses the future of data science careers and the importance of fostering curiosity about technology in younger generations. Takeaways • Cher Fox began her career at a young age, learning programming on a Commodore 64 • Data fitness coaching parallels personal training, focusing on data quality and purpose • Bad data leads to significant issues in organizations, impacting decision-making • Everyone in an organization shares responsibility for data management • Data governance is a complex but necessary undertaking for businesses • Only a small percentage of organizational data meets quality standards • Many companies are unprepared for the implementation of AI technologies • Hiring practices need to evolve to allow diverse talent into data roles • Youth today are overexposed to technology, impacting their curiosity • Cher emphasizes the importance of fitness and physical activity in her life Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye Tillson and John Spiegel discuss with Roy Chua the evolving landscape of Zero Trust and SASE across different regions. They explore the challenges organizations face in implementing Zero Trust, the importance of governance, and the need for simplification in security tools. The conversation also highlights the significance of quick wins in Zero Trust implementation, the current state of SASE, and the concept of Universal Zero Trust. The episode concludes with a discussion on vendor diversity and the importance of community engagement in sharing knowledge and experiences. Takeaways • Zero Trust is recognized globally as essential for security • Many organizations struggle with the practical implementation of Zero Trust • Governance often leads to a checkbox mentality rather than genuine adoption • Simplifying security tools can enhance user experience and effectiveness • Identifying quick wins is crucial for gaining momentum in Zero Trust initiatives • Documentation on Zero Trust is often dense and vendor-specific • SASE is still evolving, with a need for simplification and integration • Universal Zero Trust aims to provide consistent security policies across environments • Diversity in security vendors can mitigate risks associated with single vendor reliance • Community engagement is vital for sharing best practices and learning from each other Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John discuss the rebranding of their podcast to focus on Zero Trust in cybersecurity. They explore the importance of Zero Trust as a strategy, share insights on community engagement, and reflect on personal experiences, including Thanksgiving culinary traditions. The conversation emphasizes the need for resources and support in navigating the Zero Trust journey, inviting listeners to participate and contribute. Takeaways • We rebranded to focus on Zero Trust • Zero Trust is a critical strategy in cybersecurity • Community engagement is essential for sharing knowledge • We will review books and resources related to Zero Trust • Listeners are encouraged to reach out and participate • Thanksgiving traditions can spark culinary conversations • Food plays a significant role in cultural exchanges • We aim to help others avoid roadblocks in their Zero Trust journey • The new website is zerotrustforum.net • We want to hear from our listeners about topics and guests Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this conversation, Dritan Saliovski discusses the intersection of M&A and cybersecurity with John and Jaye. They explore how companies are now considering cybersecurity during the M&A process, including due diligence, costing, integration, and reputation. They also discuss the potential value that cybersecurity can bring to an acquiring company, as well as the impact of past breaches on the value of a company. The conversation touches on the trend of using AI in M&A and the challenges faced in the M&A process, such as stakeholder management and convincing stakeholders of the importance of cybersecurity. They also discuss the advantages of being an insurance broker in terms of access to real-time incident data and the focus on recovery in addition to protection. The conversation explores the importance of cyber resiliency in the context of mergers and acquisitions (M&A). It highlights the shift from focusing on physical events to cyber events as the more prevalent and likely threat. The discussion touches on the need for companies to have a cyber resiliency program and response plan, especially in the M&A process. The conversation also delves into the role of certifications and maturity models in assessing cyber resiliency, with the conclusion that they are not always reliable indicators. The episode ends with a lighthearted discussion about pizza toppings. Takeaways • Companies are now considering cybersecurity during the M&A process, including due diligence, costing, integration, and reputation. • Cybersecurity can bring potential value to an acquiring company, especially if the target company has better tools, technologies, or consolidation in place. • Past breaches can affect the value of a company, and companies that have been breached may be more willing to sell. • There is a trend of using AI in M&A, with larger companies acquiring smaller AI companies to harness their technology and intellectual property. • Challenges in the M&A process include stakeholder management and convincing stakeholders of the importance of cybersecurity. • Being an insurance broker provides access to real-time incident data, which can inform cybersecurity decisions and help clients mitigate risks. • The focus in cybersecurity is shifting from solely protection to also include recovery, as companies recognize the possibility of being compromised. Cyber resiliency is becoming increasingly important in the M&A process, as cyber events are more prevalent and likely than physical events. • Companies need to have a cyber resiliency program and response plan in place to mitigate the risks associated with cyber threats. • Certifications and maturity models may not always be reliable indicators of cyber resiliency, as the scope and applicability of these certifications can vary. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Dr. Chase Cunningham discusses with John and Jaye the evolving landscape of Zero Trust cybersecurity. They explore the global adoption of Zero Trust principles, the importance of maturity models, and the need for accountability at all levels of an organization. The conversation highlights the challenges of user awareness, the future of Zero Trust, and the resources available for education. They also touch on the cultural shift needed within organizations to prioritize cybersecurity as a shared responsibility. Takeaways • Zero Trust is increasingly recognized as a strategic initiative globally. • Progress in cybersecurity should be measured incrementally. • Maturity models are essential for assessing Zero Trust implementation. • Leadership engagement is crucial for effective cybersecurity strategies. • User awareness programs often fail if they complicate workflows. • Cybersecurity should be seen as a fundamental human right. • Organizations must take personal accountability for their cybersecurity choices. • The future of Zero Trust will involve continuous evolution and adaptation. • Sharing experiences and lessons learned in cybersecurity is vital. • Education and resources for Zero Trust need to be more accessible. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this conversation, Nick Mullen, the founder and CEO of Sanguine Security Solutions, discusses his journey into the cybersecurity field and the importance of the human element in security. He shares an analogy of protecting a pot of gold to explain the concept of zero trust. The conversation also highlights the need for a comprehensive strategy that makes secure choices easy choices and addresses the human attack surface. It emphasizes the importance of relevant and targeted training to combat social engineering attacks. The discussion concludes with the suggestion of implementing technologies like push authentication to enhance security. The conversation covers topics such as the lack of a framework for mapping the human attack surface, the role of governance in cybersecurity, and the challenges of communicating the value of security. Takeaways • The human element plays a significant role in cybersecurity, with a large percentage of breaches involving social engineering. • Zero trust is a strategy that requires a comprehensive approach, making secure choices the easy choices and addressing the human attack surface. • Training should be relevant and targeted to individual roles and responsibilities, rather than a one-size-fits-all approach. • Implementing technologies like push authentication can enhance security and protect against social engineering attacks. There is a lack of a framework for mapping the human attack surface and implementing tools and technologies to protect against it. • Governance plays a crucial role in ensuring that organizations are doing what they are supposed to be doing and doing it well. • Good governance should support an organization's enterprise goals and strategies, whether they are focused on growth and innovation or cost leadership and stability. • The role of security professionals is often misunderstood, and there is a need to communicate the positive impact of security measures to the wider audience. • Personal preferences for pineapple on pizza vary, but it can be seen as a divisive topic. • Ranch dressing is a popular staple in Midwest cuisine. • Ireland is a highly recommended travel destination known for its beautiful landscapes and friendly people. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Jaye Tillson and John Spiegel, sat down for a live conversation at Black Hat 2024. In this special episode, they dive into the highlights of the conference, exploring key trends, emerging technologies, and their potential impact on the industry. From the rise of 'coffee shop networking' and 'Universal ZTNA' to the implications of AI and the ongoing importance of cyber awareness training, Jaye and John cover it all. But that's not all! This episode has a surprise ending, so be sure to tune in. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn At the SSE Forum, we believe you won’t solve all your problems in a single SSE project. SSE is a process. It will take time. It will involve technology, people, culture, and those pesky tech silos. They all need to be addressed. The good thing to know is you are not alone on your journey. Many are making the move to this new network and security model. And with this in mind, Jaye and John formed the SSE Forum. It’s a place where the best minds in the industry come together to help push this technology forward. The forum is driven 100% by the enterprise security and network practitioner and maintains a vendor-neutral perspective. Our goal is to be the rising tide for all boats! What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

We hosted a live conversation with cybersecurity expert Art Ocain at BlackHat 2024. The discussion encompassed a variety of critical topics, including #ransomware prevention and response, and the importance of #cyberawareness training. Jaye, John, and Art then discuss preparation for industry events like BlackHat and Defcon, and key takeaways from this year's conference. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

We hosted a live conversation with cybersecurity expert Gina Yacone at Black Hat 2024. The discussion covered a range of critical topics, including the transformative impact of Zero Trust and AI, the challenges of burnout in the industry, and the importance of fostering cyber awareness. Gina, John, and Jaye also explored how events like Black Hat contribute to the cybersecurity community and offered insights on maximizing their benefits. There may have also been a discussion on 'Does pineapple belong on pizza'. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Joe Sullivan, former CISO of Uber and Facebook, shares his journey in the IT and security industry and discusses the evolving relationship between the public and private sectors in cybersecurity. He highlights the need for collaboration and communication between government agencies and tech companies to improve cybersecurity practices. Joe also emphasizes the importance of CISOs having a voice in policymaking and investing in tools that facilitate incident response and coordination across departments. He encourages the security community to continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. The conversation covers topics such as cybersecurity standards, the need for a clear and objective minimum bar, the role of the security leader, the importance of cross-functional collaboration, the evolving role of CISOs, and the challenges they face. It also touches on the need for better communication, incident response preparedness, and educating the wider team about cybersecurity. The conversation concludes with a discussion about the importance of protecting digital risks and the role of CISOs in addressing them. Takeaways • Collaboration and communication between government agencies and tech companies are crucial for improving cybersecurity practices. • CISOs need to have a voice in policymaking and provide feedback on regulations to ensure their perspectives are considered. • Investing in tools that facilitate incident response and coordination across departments is essential for effective cybersecurity management. • The security community should continue innovating and finding ways to protect customers and navigate the changing regulatory landscape. There is a need for a clear and objective minimum bar for cybersecurity standards. • The role of the security leader is evolving to include responsibilities beyond cybersecurity. • Cross-functional collaboration is crucial for effective cybersecurity. • CISOs need to educate the wider team about cybersecurity and the importance of their involvement. • Incident response preparedness is essential, as it is likely that organizations will face a cybersecurity incident at some point. • CISOs should take a proactive approach to address digital risks and protect the organization. • The cybersecurity community needs to come together and support each other in the fight against cyber threats. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this conversation, Evgeniy Kharam discusses his upcoming book on soft skills in technical sales. He emphasizes the importance of soft skills for sales engineers and how they have become more instrumental in the sales process. Evgeniy also highlights the need for adaptability and creativity in presentations, as well as the impact of soft skills in building connections with customers. The conversation then shifts to the recent CrowdStrike update that caused widespread disruption, leading to a discussion on the risks of relying on a single vendor and the importance of having a backup plan. The conversation concludes with a mention of Evgeniy's upcoming bike and hike event, which aims to bring together professionals to discuss innovation and security in the bike industry. Takeaways • Soft skills are crucial for sales engineers and have become more instrumental in the sales process. • Adaptability and creativity in presentations can significantly impact building connections with customers. • Relying on a single vendor can pose risks, as demonstrated by the recent CrowdStrike update that caused widespread disruption. • Having a backup plan is essential to mitigate the impact of vendor outages or failures. • Evgeniy's upcoming bike and hike event aims to bring professionals together to discuss innovation and security in the bike industry. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode of The Edge, Anne Coulombe discusses the concept of Zero Trust as a principle rather than a product or strategy. She emphasizes the importance of identity in Zero Trust and how it can enhance both security and user experience. Anne also highlights the need for Zero Trust in industries like healthcare and life sciences, where data privacy and security are crucial. She explains the role of user behavior analytics and AI in Zero Trust and emphasizes the importance of responsible AI and governance. Anne also discusses the future of cloud computing and the continued relevance of networks. Takeaways • Zero Trust is a principle that leverages network, IAM, and other security elements to create a secure environment for processing data. • Zero Trust enhances both security and user experience by reducing friction in accessing resources and adapting access based on user identity. • Industries like healthcare and life sciences are adopting Zero Trust to secure devices and systems and protect patient data. • User behavior analytics and AI can play a crucial role in identifying abnormal behavior and preventing security threats. • Cloud computing and Zero Trust go hand in hand, with identity being a key component in securing cloud-based services. • The future of cloud computing involves faster compute, AI, ML, and responsible AI with proper governance. • Networks are not dead but are being transformed and will continue to evolve alongside advancements in technology. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Eliza-May Austin shares her journey in the cybersecurity industry and the basics that companies should focus on. She emphasizes the importance of doing the basics right, such as access management, logging and monitoring, and making use of existing security systems. Eliza-May also highlights the need for aligning cyber defense with business strategy and avoiding unnecessary complexity. She discusses the challenges of implementing Zero Trust and the importance of communication and education in any project. Additionally, Eliza-May shares lessons she has learned as a CEO, including the importance of sleep and downtime for both personal well-being and the success of the business. In this conversation, Eliza-May Austin discusses the importance of building a reliable team and setting boundaries to maintain work-life balance. She shares mechanisms she uses to disconnect from technology and take time off. Eliza-May also talks about the challenges of being a founder and the impact it can have on relationships. She emphasizes the need to surround oneself with the right people and let go of friendships that don't add value. The conversation also touches on the topic of diversity in the tech industry and the importance of integrity. Takeaways • Focus on doing the basics right in cybersecurity, such as access management and logging and monitoring. • Make use of existing security systems and align cyber defense with business strategy. • Avoid unnecessary complexity in cybersecurity projects. • Implementing Zero Trust requires careful planning, communication, and education. • As a CEO, prioritize sleep and downtime for personal well-being and the success of the business. Building a reliable team is critical for success as a founder. • Setting boundaries and disconnecting from technology are important for maintaining work-life balance. • Surrounding oneself with the right people and letting go of friendships that don't add value is necessary for personal and professional growth. • The tech industry still lacks diversity, and there is a need to move beyond tokenism and focus on hiring based on merit. • Maintaining integrity is crucial in the cybersecurity industry and in leadership roles. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this conversation with Jaye Tillson and John Spiegel, Jim Tiller discusses the state of cybersecurity in 2024 and the role of a vCISO. He emphasizes the importance of having a breadth of understanding in cybersecurity and the challenges of keeping up with the evolving industry. The conversation also touches on the common risks and concerns across different verticals, the need to raise the cost for attackers, and the debate on platforms and consolidation in the cybersecurity market. The conversation explores the disruption and changing landscape of security, the importance of consolidation and simplification, the future of security, the role of Zero Trust and AI, and fun food experiences. Takeaways • Having a breadth of understanding is crucial in the field of cybersecurity, as it covers a wide range of topics including governance, legislation, infrastructure, and more. • The role of a VCISO (Virtual Chief Information Security Officer) has emerged as a way to provide strategic security guidance to organizations without the need for a full-time dedicated CISO. • The state of cybersecurity in 2024 is characterized by the increasing threat of ransomware and the need for organizations to have a comprehensive cybersecurity strategy. • Consolidation in the cybersecurity market is a topic of debate, with some advocating for platform solutions while others emphasize the importance of diversity and integration. Customers are becoming more aware of the disruption and changing nature of security solutions, leading to a desire for more consolidated and simplified approaches. • Consolidation and simplification can lead to improved efficiency, cost savings, and better risk management. • The future of security may involve advancements in AI and the development of more accessible and user-friendly AI products. • Zero Trust remains important, particularly in the federal space, but there is a need to make it more tangible and easier to implement. • Food experiences can be memorable and enjoyable, even in unexpected places. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Identity is involved in everything we do, and many skills from other IT fields can easily transition into the identity space. It's important to understand the breadth of what identity is trying to accomplish, which is to allow others to interact and consume services in a frictionless and secure manner. There are many resources available to learn about identity, including tutorials, classes, and industry websites. Machine identities, such as IoT devices, also need to be treated as identities and have the same controls and management in place. When choosing identity solutions, it's important to understand the organization's objectives, challenges, and requirements before considering specific vendors or tools. In this conversation, with John Spiegel and Jaye Tillson, David Morimanno emphasizes the importance of having a sound plan and strategy before implementing identity and access management solutions. He highlights the significance of interpersonal and communication skills in the field of identity access management, as every action has an impact on the business. David also stresses the need to understand the business's workflows and goals when implementing solutions. He advises against rushing the implementation process and emphasizes the importance of patience and continuous improvement. Additionally, he emphasizes the value of building a solid team and following industry frameworks. Takeaways • Identity is involved in everything we do and many skills from other IT fields can transition into the identity space. • Understanding the breadth of what identity is trying to accomplish is important for success in the industry. • There are many resources available to learn about identity, including tutorials, classes, and industry websites. • Machine identities, such as IoT devices, need to be treated as identities and have the same controls and management in place. • When choosing identity solutions, it's important to understand the organization's objectives, challenges, and requirements before considering specific vendors or tools. Have a sound plan and strategy before implementing identity and access management solutions. • Interpersonal and communication skills are crucial in identity access management. • Understand the business's workflows and goals when implementing solutions. • Be patient and continuously improve, as implementing identity and access management solutions takes time. • Build a solid team and follow industry frameworks. Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Lisa Forte discusses with Jaye and John the recent activities of the LockBit ransomware group and the limitations of current disruption efforts. She highlights the need for stronger actions, such as making ransom payments illegal, to combat ransomware attacks effectively. Lisa also emphasizes the importance of protecting critical data and business services, as well as the challenges of legacy systems and the potential benefits of application transformation. The discussion concludes with the significance of email and out-of-band communication and the value of running simulations and playbooks for cyber emergencies. In this conversation, Lisa Forte shares insights on incident response and cybersecurity exercises. She emphasizes the importance of preparing for a real incident by creating playbooks and having pre-drafted communication templates. Lisa also highlights the significant impact of cybersecurity incidents on individuals and the need for rest and support during such times. The conversation then delves into the topic of running exercises, including who should be involved and how often they should be conducted. Lisa also discusses the pitfalls of comparing oneself to others and the importance of focusing on personal progress. The conversation concludes with a lighthearted discussion about Lisa's experiences in Japan and the ongoing debate about pineapple on pizza. Takeaways • Current disruption efforts against ransomware groups like LockBit are not enough to create lasting impact. • Making ransom payments illegal may be necessary to change the ransomware landscape. • Businesses should focus on protecting critical data and business services, as well as considering alternative processes and redundancy. • Legacy systems pose challenges and may require application transformation to enhance security. • Email and out-of-band communication are critical during cyber emergencies. • Running simulations and playbooks for cyber emergencies can help organizations be better prepared. Prepare for a real incident by creating playbooks and pre-drafting communication templates. • Cybersecurity incidents have a significant impact on individuals, and support and rest are crucial during these times. • When running exercises, involve leadership and consider the progressive structure of the exercises. • Avoid comparing yourself to others and focus on personal progress. • Embrace cultural differences, such as coffee consumption habits, when traveling. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John discuss all things AI with a friend of the show Gina Yacone. We start by discussing what has happened since we last spoke to her and then we dive into the pros and cons of AI. We discuss what she is seeing people adopt, what is working well, and what is not working well. Is AI the future? What do you think? Listen to an expert. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John discuss with Roy Chua how he got into the industry, where his journey began, why zero trust is important in our new hybrid world, the difficulties involved in founding a company, SASE, the growing number of cyber attacks, AvidThink, and much much more. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John discuss with Dana Morimanno how he got into the industry, where his journey began, why zero trust is important in our new hybrid world, why he feels identity should be the starting point for everything we do, and much much more. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John talk to a long-term friend of the show Dr Chase Cunningham, aka Dr Zero Trust. They discuss the state of zero trust and what the future holds and also his new book How NOT to Lead. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John discuss with Greg Van Der Gaast how he got into the industry, the role of the CISO, the state of cyber security, zero trust, the role of the vendor, his book, and much more. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John dive into SASE Architectures with Joe DePalo! They pull back the curtain on how SASE networks are built on a global scale to help you understand why you need to interview your vendor about how they build their networks. They also include the must-ask questions! If you are kicking the tires on SASE and SSE, this is a must listen to episode. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye flies solo and discusses with Steve Hindle how he got into the industry, the role of the CISO, Crisis Management, Zero Trust, Leadership, and much more. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John discuss with Jason Garbis the evolution of Zero Trust, how to start your Zero Trust program and most importantly, how to sell it to leadership. We also get into Jason’s new book, “Getting Started with Zero Trust"! Let’s go get Zero Trusty! Follow & Subscribe on all Podcast platforms. link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John discuss with Derek Smith how he got into the industry, the cloud, past present, and future, what is an 'evangelist', does zero trust matter for the cloud, his podcast 'Security Without Borders' and much much more. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

In this episode, Jaye and John discuss with Dana Mirrow how he got into the industry, the role of the firewall, the cloud, SASE, critical skills to learn to be a security engineer, what is next for SSE, and much much more. Follow & Subscribe on all Podcast platforms. https://link.chtbl.com/XIW5zsAn What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way! Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/. Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/ Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/