Trading Least Privilege for Security Theater - Cris Neckar - ESW #201 | Enterprise Security Weekly (Video) Podcast

Trading Least Privilege for Security Theater - Cris Neckar - ESW #201: The appearance of safety and actual security often do not align as closely as we would like to think. As enterprise security products get "smarter", the access that they require to your most sensitive data grows. What are some of the risks associated... by Security Weekly Podcast Network (Video)

21 min listen

InfoSec Fatigue: All links and images for this episode can be found on CISO Series () Have we reached peak InfoSec fatigue? Revolving CISOs and endless cyber recruitment OR the fact that we're spending more money to reduce even greater risk. Is it all leaving our... by Defense in Depth

28 min listen

Do You Know the Secret Cybersecurity Handshake?: Direct link for episode on blog () We get the feeling that as we're adding more solutions and requiring more certificates, we're just making the problem of security harder and harder. Has the problem of not enough talent become an issue that we... by CISO Series Podcast

34 min listen

Leveraging AI & The Role Identity Plays - BSW #350: AI is more than just a buzzword. Done right, AI can improve decision making and scale your identity security platform to manage every identity, human and machine, physical and digital. Learn about how Saviynt’s #1 Identity Security platform is... by Security Weekly Podcast Network (Video)

34 min listen

Identity Resilience: The Next Frontier in Security - Hed Kovetz, Ray Zadjmool, Jeff Margolies - BSW #350: In today's enterprises, the Identity Access Management (IAM) System is the key to a business' critical operations. But that IAM environment is more vulnerable than most security executives realize. Segment Resources: This segment is sponsored by... by Security Weekly Podcast Network (Audio)

61 min listen

Get Out! The FUD Is Coming from the Inside: All links and images for this post can be found on CISO Series () On this week's CISO/Security Vendor Relationship Podcast, we're pointing fingers at practitioners, not vendors, for promoting the FUD (fear, uncertainty, and doubt) scare-a-thon. This... by CISO Series Podcast

35 min listen

What Does Zero Trust Mean To You? - Peter Smith - PSW #683: In this segment we'll unpack "Zero Trust", what does it mean and how can it be applied as a concept to information security today? It certainly begs the question what and who do you trust? Often without too much thought, we trust software, machines,... by Security Weekly Podcast Network (Video)

62 min listen

“Bad” Security Practices That Really Aren’t All that Bad: All links and images for this episode can be found on If they can find flaws, security professionals are quick to label it as bad security behavior. But often, what is marked as "bad" may have problems, but when looked at from a reducing risk... by CISO Series Podcast

36 min listen

It’s OK to Look Like a Cyber Hero. Just Don’t Act Like One.: All links and images for this episode can be found on Security professionals should turn in the cyber hero mentality for the "sidekick" role. Many cybersecurity leaders believe they need to save the company from all the stupid users who can't protect... by CISO Series Podcast

40 min listen

Digital Identity: The Cornerstone of Our Digital World - Andrew Hindle - ESW #271: Digital identity is key to modern security architectures; enables privacy-preserving, trusted services; and drives customer-oriented experiences. Key trends like passwordless, verified credentials, and personal identity will have a profound effect on... by Enterprise Security Weekly (Video)

27 min listen

Digital Identity: The Cornerstone of Our Digital World - Andrew Hindle - ESW #271: Digital identity is key to modern security architectures; enables privacy-preserving, trusted services; and drives customer-oriented experiences. Key trends like passwordless, verified credentials, and personal identity will have a profound effect on... by Security Weekly Podcast Network (Video)

27 min listen

ZeroTrust Data Security - Jeff Capone, Peter Levett - ESW #200: Data breaches and insider threats are happening, even with costly and complex data protection programs in place. A reimagined approach to data security needs to be taken. This segment is sponsored by SecureCircle. Visit to learn more about... by Security Weekly Podcast Network (Video)

27 min listen

ZeroTrust Data Security - Jeff Capone, Peter Levett - ESW #200: Data breaches and insider threats are happening, even with costly and complex data protection programs in place. A reimagined approach to data security needs to be taken. This segment is sponsored by SecureCircle. Visit to learn more about... by Enterprise Security Weekly (Video)

27 min listen

ESW #319 - Amitai Ratzon, Steve Ragan, Deepika Chauhan, Thomas Kinsella, Jon Check: On this edition of the ESW news, we're all over the place! Funding and acquisitions are a little sad right now, but AI and TikTok bans raise our spirits. The hosts are split on feelings about the new .zip gTLD, there's a new standard for scoring an... by Security Weekly Podcast Network (Audio)

145 min listen

Your Password Is Too Long. Please Shorten It.: All links and images for this episode can be found on . What happens when you want to adhere to more secure behavior, but the tool you're using forces you to be less secure, solely because they didn't architect in more stringent security when they... by CISO Series Podcast

34 min listen

A Pesticide-Free Podcast Made with 'All Natural' Intelligence: We eschew those cybersecurity firms touting claims of artificial intelligence for our organic conversation-based approach to podcasting. This show, like all the previous ones is hosted by me, (), founder of and . Our... by CISO Series Podcast

29 min listen

InfoSec Trends for 2020: All links and images for this episode can be found on CISO Series () We're coming to the end of the year and that means it's time to make our predictions for 2020. Mark this episode and check back in one year to see how we did. for the... by Defense in Depth

26 min listen

Keep Pouring. I'll Tell You When I've Had Enough Security.: All links and images for this episode can be found on CISO Series () When do we hit the diminishing returns of too much cybersecurity? How will we know? Will a bell go off? Will our cup runneth over? This week's episode is hosted by me, (),... by CISO Series Podcast

38 min listen

Understanding the Cybersecurity Ecosystem, Part 1 - Ross Haleliuk - BSW #345: In this discussion, we focus on vendor/tool challenges in infosec, from a security leader's perspective. To quote our guest, Ross, "running a security program is often confused with shopping". You can't buy an effective security program any more than... by Security Weekly Podcast Network (Video)

31 min listen

Don’t Make Me Explain This, Because I Can’t: All links and images for this episode can be found on If you know a difficult concept very well and you're incapable of explaining it simply to others who don't understand it, it's known as the "curse of knowledge." It is for this reason far too many... by CISO Series Podcast

34 min listen

Getting Over Our "Security ≠ Compliance" Obsession: Links and images for this episode can be found on CISO Series () We repeat "Security ≠ Compliance" so often it's become our mantra. Does anyone pay attention to it anymore? We're unpacking our compulsion to keep saying it on the latest episode of... by CISO Series Podcast

31 min listen

Cybersecurity Readiness as Hiring Criteria: All links and images for this episode can be found on CISO Series () What if every candidate interviewed was tested on their cybersecurity competency? How would that affect hiring and how would that affect your company's security? for the... by Defense in Depth

26 min listen

Who Are the Perfect Targets for Ransomware?: All images and links for this episode can be found on CISO Series () If you've got lots of critical data, a massive insurance policy, and poor security infrastructure, you might be a perfect candidate to be hit with ransomware. This week and this week... by CISO Series Podcast

35 min listen

ASW #240 - Kelly Shortridge, Eric Fourrier, Richard Yew: What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these questions and more. Segment Resources:... by Security Weekly Podcast Network (Audio)

71 min listen

Cybersecurity Strategy and AI in 2023: #cybersecurity #ciso #ai #aisecurity In this exclusive interview, NVIDIA's Chief Security Officer, David Reber, discusses the complexity of the company's product line and its impact on security. He explains why NVIDIA’s complex hardware and software... by CXOTalk

42 min listen

Fear of Automation: All links and images for this episode can be found on CISO Series. Why are security professionals so darn afraid of automation? We continue to hold on to the idea that people have to be integral in the real-time decision process to protect ourselves... by Defense in Depth

24 min listen

Click This Link to Fail a Phishing Test: All links and images for this episode can be found on CISO Series () Our phishing tests are designed to make you feel bad about yourself for clicking a link. We're starting to realize these tests are revealing how insensitive we are towards our... by CISO Series Podcast

33 min listen

Securing User Connections to Applications - Jonny Noble - BSW #220: Are Secure Web Gateways doing their job to keep businesses safe in 2021? Recent survey results from ESG reveal 1 in 10 are not happy with their secure web gateway (SWG) and/or web security. Yet by 2024, the SWG market is projected to grow to 10.9... by Security Weekly Podcast Network (Video)

37 min listen

Prepping for Security Incidents, Automated Validation & No-Code Automation Revolution - Amitai Ratzon, Jon Check, Thomas Kinsella - ESW #319: The reality is no organization is insusceptible to a breach – and security teams, alongside the C-suite, should prepare now to make the response more seamless once a crisis does happen. Based on his experience working 1:1 with security leaders in... by Enterprise Security Weekly (Video)

44 min listen

Prepping for Security Incidents, Automated Validation & No-Code Automation Revolution - Amitai Ratzon, Jon Check, Thomas Kinsella - ESW #319: The reality is no organization is insusceptible to a breach – and security teams, alongside the C-suite, should prepare now to make the response more seamless once a crisis does happen. Based on his experience working 1:1 with security leaders in... by Security Weekly Podcast Network (Video)

44 min listen

Discover this podcast and so much more

Trading Least Privilege for Security Theater - Cris Neckar - ESW #201

Trading Least Privilege for Security Theater - Cris Neckar - ESW #201

Description

Titles in the series (100)

More Episodes from Enterprise Security Weekly (Video)

Related podcast episodes