BSW #266 – John Bruggeman & Brandon Dunlap
What does a CISO do all day? Do they eat bon-bons and read the WSJ? Do they read Threatpost or BleepingComputer or Twitter?
Why does a company need a CISO, or better still, do they need one?
All these questions and more will be answered in this weeks episode.
Segment Resources:
https://www.cbts.com/security/security-services/
https://www.cbts.com/blog/cloud-security-controls-mitigate-risk/
https://www.cbts.com/blog/weighing-risks-benefits-moving-to-the-cloud-part-1/
https://www.cbts.com/blog/what-is-cyber-insurance/
With recent proposed rule making from he SEC, there is increased focus on the Board's involvement in governing and managing cybersecurity. What is changing in how effective CISO's engage with their Board of Directors and what is over the horizon for cybersecurity leaders?
Visit https://www.securityweekly.com/bsw for all the latest episodes!
Follow us on Twitter: https://www.twitter.com/securityweekly
Like us on Facebook: https://www.facebook.com/secweekly
Full Audio
Segments
1. Inside the CISO’s Office – John Bruggeman – BSW #266
What does a CISO do all day? Do they eat bon-bons and read the WSJ? Do they read Threatpost or BleepingComputer or Twitter?
Why does a company need a CISO, or better still, do they need one?
All these questions and more will be answered in this weeks episode.
Segment Resources:
https://www.cbts.com/security/security-services/
https://www.cbts.com/blog/cloud-security-controls-mitigate-risk/
https://www.cbts.com/blog/weighing-risks-benefits-moving-to-the-cloud-part-1/
Announcements
Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.
Guest

John is a veteran technologist, CTO and CISO, with nearly 30 years of experience building and running enterprise IT, and shepherding information security programs towards maturity, based on industry standards like ISO27K and NIST CSF, as well as regulatory compliance requirements from PCI-DSS, HIPAA, FERPA, A133 and GDPR. John has several GIAC certifications (GSEC, GCIH and GCWN) and has been active in the local information security community, through groups like Infragard and the Higher Education Security Council for EDUCAUSE. He holds a BS and MA from Xavier University and has served as an adjunct professor at both Xavier and the University of Cincinnati.
Hosts

2. The Board’s Role In Cybersecurity – Brandon Dunlap – BSW #266
With recent proposed rule making from he SEC, there is increased focus on the Board's involvement in governing and managing cybersecurity. What is changing in how effective CISO's engage with their Board of Directors and what is over the horizon for cybersecurity leaders?
Announcements
Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!
Do you have a specific guest or topic that you want us to cover on one of the shows? Submit your suggestions for guests by visiting https://securityweekly.com/guests and completing the form! We review suggestions monthly and will reach out to you once reviewed!
Guest

With more than 25 years in information security, Brandon has played nearly every position on the field. From security engineer to CISO, from security entrepreneur to Product Manager, he has either done it or seen it first hand. While he hasn’t always done it right the first time, he has learned from his missteps and actively engages the community so that they too may learn from his mistakes and his successes.
Hosts
