Third Party Risk Management Doesn’t Stop When the Contract is Executed

Risk and Reels: A Cybersecurity Podcast

#Tech #Business #Jeffrey Wheatman #Cyber #Tech Startups #Gartner #Cybersecurity #Data Breaches #Hacking #Hackers #Ransomware #CISO #Cyber Security #Cyber Analyst

50:30

Episode Notes [00:00] The Importance of Questioning [01:21] Introduction to Curated Questions [02:20] Meet Kevin Kelly [03:56] Kevin Kelly's Mentor: Stewart Brand [05:33] The Role of Questions in Intellectual Traditions [06:47] Disequilibrium and Growth [10:21] Embodied Questions and Exploration [11:11] Balancing Exploration and Exploitation [11:50] The Inefficiency of Questioning [15:53] The Abundance Mindset [18:39] The Inevitable and Quality Questions [19:26] Hill Climbing vs. Hill Making [22:28] The Challenge of Innovation [24:13] The Beauty of Engineering and Innovation [24:34] Navigating the Frontier of New Technologies [25:33] The Role of AI in Question Formulation [26:43] Challenges in Advancing AI Capabilities [29:11] The Long Now Foundation and the 10,000 Year Clock [29:56] Transmitting Values Over Time [31:03] Ethics in AI and Self-Driving Cars [33:26] The Art of Questioning [34:04] Photography: Capturing vs. Creating [36:12] The Inefficiency of Exploration [38:36] Daily Practice and Long-Term Success [40:17] The Importance of Quantity for Quality [43:22] Final Thoughts and Encouragement on Questioning [46:24] Summary Takeaways Resources Mentioned Wired Magazine Whole Earth Review WELL Hackers Conference What Technology Wants by Kevin Kelly The Inevitable by Kevin Kelly Cool Tools Project Long Now Foundation Stewart Brand Socratic Method Koan René Descartes Conde Nast Vouge Olivetti Typewriter Trolley Problem Terry Gross Lex Friedman Tim Ferriss KK.org Kevin2Kelly on Instagram Recomendo Newsletter Excellent Advice for Living Beauty Pill Producer Ben Ford Questions Asked When did you first understand the power of questions? Can I do that? Can that be something that you can learn? How did questions function differently between Eastern versus Western intellectual traditions? What role do you think embodied questions those we explore through doing rather than thinking play in developing wisdom? What's on the other side of the hill? What happens if you go to the end? What's the origin of this? How should one think about the exploratory in one's life? Is there anything that you would add to your list of 15 statements that define what makes a quality question? Is there a qualitative difference between the questions humans are asking and the questions our AI systems are beginning to formulate? What do you think would help them get there? Any idea on a forcing function on how we get them [LLMs] to ask the better questions so that they might improve in that direction? What were some novel questions that broke your brain at the time in thinking about this 10,000-year clock or beyond? What's it good for? What would you use it for? What else could you do over the long term for 10,000 years? How do you transmit values over time? How do you evolve values that need to change, and how do you make a difference? How do even know what you don't want to change? What do you want to continue? What's the most essential aspects of our civilization that we don't want to go away? What are the rules? What is the system? How do you pass things along in time and not change the ones you don't wanna change, and make sure you change the ones that are more adaptable so they can adapt? What do you think about questioning itself as an art form? How has being a photographer influenced the way you question reality, visually compared to verbally? Are you a photographer that takes photos or makes photos? What will happen? What will happen next? What are your right now questions that you are wrestling with or working with in your life? Can someone else do what I'm trying to do here? Am I more me in doing my art or more me in doing the writing? Do you have any other thoughts or encouragement about questions that we haven't explored? What makes a good question? How do you ask a good question? What questions do you dwell on to be in purposeful imbalance? What is your practice in embracing the inefficient nature of questions to achieve breakthroughs? What are the new hills you can build and frontiers you can explore? How can you use your curiosity and humanity to pursue questions that trend toward the fringes?…

about a year ago 31:01

MP3•Episode home

In this episode, Jeffrey talks to Melissa Mellen, Head of Third Party Risk Management for the Federal Reserve Bank of New York. They discuss movies that have unforeseen plot twists and the myriad challenges related to addressing third party risk management in cybersecurity.

88 episodes

Risk and Reels: A Cybersecurity Podcast

Third Party Risk Management Doesn’t Stop When the Contract is Executed

Risk and Reels: A Cybersecurity Podcast

published about a year ago

MP3•Episode home

88 episodes

#Tech #Business #Jeffrey Wheatman #Cyber #Tech Startups #Gartner #Cybersecurity #Data Breaches #Hacking #Hackers #Ransomware #CISO #Cyber Security #Cyber Analyst

All episodes

Risk and Reels: A Cybersecurity Podcast

1
The Accidental CISO 35:38

3 days ago35:38

35:38

In this episode of Risk & Reels , Jeffrey Wheatman sits down with RJ Friedman, CEO of Dayone Cyber, to talk frameworks, risk, and leadership. RJ shares how his start in sales shaped his approach as a CISO, why CIS 18 remains his go-to, and how mapping frameworks to business goals makes all the difference. It's a sharp, honest look at what makes cybersecurity leadership actually work.…

Risk and Reels: A Cybersecurity Podcast

1
A Story of Limited Resources 32:42

17 days ago32:42

32:42

In this episode of Risk & Reels , Jeffrey Wheatman sits down with Craig Taylor, CEO of CyberHoot, to talk about how small businesses are navigating the evolving world of cybersecurity compliance—especially the demanding standards of CMMC. From Apollo 13-style ingenuity to the unintended consequences of regulation, Craig shares a 30-year perspective rooted in psychology, education, and operational realism. Tune in for a conversation that covers limited resources, positive reinforcement, and why now is the time to prepare.…

Risk and Reels: A Cybersecurity Podcast

1
From Homicide to Hackers: Fixing Cybersecurity’s Broken Model 34:58

4 weeks ago34:58

34:58

In this episode, Jeffrey Wheatman sits down with Carter Schoenberg, Chief Security Officer at Soundway Consulting and author of Why Cybersecurity Fails in America . From his unexpected transition from homicide detective to cybersecurity leader, Carter shares hard-earned insights into the failures of our current cyber risk models—and how to fix them. They dive into cybercriminal collaboration, the stagnation of HR and hiring practices, and why security leaders need to learn to “speak CFO.”…

Risk and Reels: A Cybersecurity Podcast

1
This Isn't the Wolf of Wall Street: Recruitment, Rewired 36:14

5 weeks ago36:14

36:14

Richie Lampani—self-proclaimed Chief Recruiter Dude—joins Jeffrey Wheatman to talk about the real state of hiring today. From music industry war stories to navigating post-pandemic expectations, Richie drops insights on transparency, mentorship, and why the “perfect candidate” is a myth. Candid, sharp, and unexpectedly hilarious.…

Risk and Reels: A Cybersecurity Podcast

1
I Robbed a Bank with a Solar Eclipse 41:53

6 weeks ago41:53

41:53

Jayson Street, Chief Adversarial Officer at Secure Yeti, returns to Risk and Reels for a no-holds-barred conversation on hacking human nature, creating teachable moments, and why kindness matters in cybersecurity. From robbing banks during celestial events to sneaky USB exploits involving hearing aids, Jayson shares stories that are as outrageous as they are enlightening. Plus: the power of the pause, avoiding blame culture, and how code words like “rutabaga” can save your family from scams.…

Risk and Reels: A Cybersecurity Podcast

1
A Confluence of Errors and a Little Help From Friends 32:00

7 weeks ago32:00

32:00

In this episode of Risk & Reels , host Jeffrey Wheatman sits down with Ed Gaudet, CEO and founder of Censinet, for an insightful conversation about entrepreneurship, product innovation, and the evolution of cybersecurity in healthcare. Ed shares the winding path that led him to founding Censinet, why listening to customers is a game-changer, and how authentic leadership and human connection have shaped his journey. The two also geek out over company origin stories in film—think Tucker , BlackBerry , and of course, Jobs . With lessons on vision, leverage, and not losing sight of the people you serve, this episode is a must-listen for builders, dreamers, and anyone navigating the fast-moving world of tech and risk.…

Risk and Reels: A Cybersecurity Podcast

1
Cyber Truths, Intelligence Myths, and Life after the NSA 33:42

8 weeks ago33:42

33:42

In this episode of Risk and Reels , host Jeffrey Wheatman welcomes security veteran and former NSA executive Don Boian for a wide-ranging conversation on intelligence, cybersecurity, and life on both sides of the public-private divide. Don reflects on his 30-year NSA career, shares myths about intelligence agencies, and explains how AI is shifting the balance for defenders. He also dives into his work as an expert witness, his boardroom insights, and how introverts can thrive in public speaking and leadership roles. It’s a blend of wisdom, war stories, and actionable advice for anyone in or entering the cybersecurity world. Here's the list of the books Don mentions - Note: He does not endorse or profit from these books. Some have facts, fiction, and a little of both. * Dark Territory * Sandworm * Countdown to Zero Day * This is How They Tell Me the World Ends…

Risk and Reels: A Cybersecurity Podcast

1
Every Day is a Risk Decision 29:39

9 weeks ago29:39

29:39

In this episode of Risk and Reels , host Jeffrey Wheatman sits down with seasoned cybersecurity leader Kimberly Trapani to discuss the evolving role of the CISO. With over 30 years in security, Kimberly shares insights from her career, emphasizing the importance of bridging the gap between business and technology. Drawing inspiration from Apollo 13 , likening a CISO’s role to mission control, she highlights navigating unexpected challenges with agility and confidence and shifting from a compliance-driven security program to a more integrated, business-resilient approach.…

Risk and Reels: A Cybersecurity Podcast

1
Silent Risk - How Do We Figure Out What We Don't Know? 13:16

10 weeks ago13:16

13:16

In this episode of Risk and Reels , Jeffrey Wheatman (interviewing himself!) dives into the concept of the 'silent breach'—cybersecurity exposures that organizations don’t realize exist until it’s too late. He explores real-world examples of major supply chain vulnerabilities and the challenges of visibility in today’s digital ecosystem. Wheatman also discusses how organizations can improve risk assessment and response strategies to mitigate the cascading effects of hidden threats.…

Risk and Reels: A Cybersecurity Podcast

1
Telling YOUR Story Within Your Organization 27:14

12 weeks ago27:14

27:14

In this episode (throwback to Black Hat 2024), Jeffrey talks to Munish Walther-Puri, Adjunct Fellow at NYU Center for Global Affairs. Jeffrey and Munish discuss exploring real-life challenges through fantasy and science fiction movies, allowing us to think through the more "uncomfortable" topics in a comfortable space. Have you heard of a "pirate unicorn?" Doubtful. Listen to episode 80 to find out.…

Risk and Reels: A Cybersecurity Podcast

1
The Concerning Impact of Cybersecurity on National Security 36:12

13 weeks ago36:12

36:12

In this episode, Jeffrey talks to Dr. David Bray , PhD, who shares his extensive background in cybersecurity, national security and technology in the public sector. The conversation explores the accurate portrayal of cybersecurity in movies, the challenges of supply chain security, and the importance of deep hardware interrogation to ensure the integrity of technology. Dr. Bray emphasizes the need for proactive measures in cybersecurity and the significance of understanding the perception of reality in the context of social engineering and national security. They also dig into the evolving landscape of cybersecurity, focusing on the challenges posed by compromised hardware, the rise of scams and ransomware and the dynamics between government and non-state actors. The conversation also touches on the implications of generative AI in cybersecurity and emphasize the need for proactive measures and innovative solutions to address these threats.…

Risk and Reels: A Cybersecurity Podcast

1
Meet an Attorney Who Keeps CISOs Out of Legal Hot Water 31:43

14 weeks ago31:43

31:43

In this episode, Jeffrey talks to Steven Teppler , a partner at Mandelbaum Barrett and the lead of the firm's Privacy and Cybersecurity practice group. Steve is an ISACA-certified Certified Data Privacy Solutions Engineer (CDPSE) and the firm's chief cybersecurity legal officer. They discuss sci-fi movies and the intersection of cybersecurity and law — focusing on the evolving role of Chief Information Security Officers (CISOs) and the legal implications they face. They also explore the increasing legal exposure for CISOs, the complexities of downstream liability and the importance of defensibility in cybersecurity practices.…

Risk and Reels: A Cybersecurity Podcast

1
Addressing Cybersecurity’s Education and Engagement Challenges 26:21

15 weeks ago26:21

26:21

In this episode, Jeffrey talks to Lisa Plaggemier , Executive Director of the National Cybersecurity Alliance . They discuss their favorite movie-based educators, the importance of cybersecurity awareness, the challenges in measuring its effectiveness and the need for engaging educational content.

Risk and Reels: A Cybersecurity Podcast

1
Fresh Perspectives from a Future Cybersecurity Leader 25:10

16 weeks ago25:10

25:10

Cybersecurity veterans see the industry through the lens of experience. But how do those visions align with the outlooks of up-and-coming cybersecurity pros? In this episode, Jeffrey talks to Nick Crabb , a senior at Florida Gulf Coast University majoring in computer information systems, focusing on cybersecurity. They discuss their favorite college movies, Nick's educational journey, the challenges of entering the field and AI's impact on future job prospects.…

Risk and Reels: A Cybersecurity Podcast

1
What the Trump Administration Could Mean for Cybersecurity 37:14

17 weeks ago37:14

37:14

In this episode, Jeffrey talks to Merritt Baer , CISO and advisory board member for Reco . Merritt also advises private businesses like Expanso , Andesite , Enkrypt AI and Level 6 Cybersecurity . She has a background in cybersecurity within the U.S. government and spent five years at AWS. Jeffrey and Merritt discuss their favorite fictitious world leaders, how the Trump administration may impact cybersecurity and the importance of public/private partnerships.…

Risk and Reels: A Cybersecurity Podcast

1
Building Business Resilience in the Face of Risk 29:44

35 weeks ago29:44

29:44

In this episode, Jeffrey talks to Sara Ricci, an accomplished consultant and executive with a proven track record in global leadership roles, specializing in building new capabilities and enhancing organizational resilience. Jeffrey and Sara discuss movies with characters who exhibit great strength in the face of risk, the difference between resilience and business continuity and the need for collaboration and communication across different teams and levels of an organization.…

Risk and Reels: A Cybersecurity Podcast

1
Calculating the Cost of Cyber Risk 32:55

37 weeks ago32:55

32:55

In this episode, Jeffrey talks to veteran CISO and cybersecurity practitioner Jason Taule. Jason has worked with Booz Allen, General Dynamics, HITRUST and others. Today, he serves as a virtual CISO for various clients. Jeffrey and Jason discuss movies that highlight character transitions, approaches to risk conversations and the cost calculations of cyber risk.…

Risk and Reels: A Cybersecurity Podcast

1
How Security Advisors Support Sales — Without Actually Selling 29:56

38 weeks ago29:56

29:56

In this episode, Jeffrey talks to Helen Patton, cybersecurity advisor at Cisco. They discuss movies where the main character undergoes a career change, the challenges of being a cybersecurity advisor and maintaining your reputation as an independent thinker when working for a large company.

Risk and Reels: A Cybersecurity Podcast

1
An Uncommon Cybersecurity Question: What Makes Your Soul Sing? 28:27

39 weeks ago28:27

28:27

In this episode, Jeffrey talks with Dom Vogel, founder of Vogel Leadership & Coaching, where he helps cybersecurity executives to be the best leaders possible. Jeffrey and Dom discuss their favorite tear-jerkers, the power of empathetic leadership and “epic friend-building.”

Risk and Reels: A Cybersecurity Podcast

1
Wanna Tackle Third-Party Risk? Collaborate, Collaborate, Collaborate! 31:01

42 weeks ago31:01

31:01

In this episode, Jeffrey talks to Richard Stiennon, Chief Research Analyst at IT-Harvest. They discuss their favorite buddy movies, the art of collaboration with vendors and third parties and how CISOs and their teams can work with partners across the supply chain.

Risk and Reels: A Cybersecurity Podcast

1
You Can't Ease off the Security Gas Pedal — Especially in Healthcare 28:25

43 weeks ago28:25

28:25

In this episode, Jeffrey talks to Adam Moore, Head of Global Cloud Solutions for Elekta. They discuss movies that look forward and backward, security threats — including AI — to healthcare data and why you can never say “we’re good” with your security posture.

Risk and Reels: A Cybersecurity Podcast

1
CISOs Need to Tell Good Stories and the Right Allies to Help Tell Them 30:35

44 weeks ago30:35

30:35

In this episode, Jeffrey is joined by Matthew Webster, founder, CEO and CISO for Cyvergence. Jeffrey and Matthew discuss movies where miscommunication impacts a character, the importance of CISOs communicating the business impact of cybersecurity and finding allies to help them do it.

Risk and Reels: A Cybersecurity Podcast

1
Third Party Risk Management Doesn’t Stop When the Contract is Executed 31:01

45 weeks ago31:01

31:01

Risk and Reels: A Cybersecurity Podcast

1
An Honest Look at Diversity and Inclusion in the Security Industry 25:08

46 weeks ago25:08

25:08

In this episode, Jeffrey talks to Octavia Howell, CISO at Equifax. Jeffrey and Octavia discuss movies that have done a good job at implementing diversity in storylines and characters, the isolation that women and people of color can feel at security events and what can be done to make the industry more inclusive.…

Risk and Reels: A Cybersecurity Podcast

1
If You’re Not Leading With Empathy, Are You Really Leading? 23:57

49 weeks ago23:57

23:57

In this episode, Jeffrey talks with Tammy Klotz, CISO of Trinseo. Recorded at the recent Gartner Security & Risk Management Summit, they discuss their favorite low-budget movies, lessons from Tammy’s book, “ Leading with Empathy and Grace ” and how the manufacturing industry has embraced cybersecurity in recent years.…

Risk and Reels: A Cybersecurity Podcast

1
The Trials and Tribulations of a Virtual CISO and Startup Advisor 30:33

50 weeks ago30:33

30:33

In this episode, Jeffrey talks to Tony Gonzalez, a former CTO, CIO and CISO in sectors such as biotech, pharma, specialty chemicals, finance and insurance. Today, Tony offers startup advisory and virtual CISO services. Jeffrey and Tony talk about movies where the main character unsuccessfully retires, the interesting nature of being a virtual CISO and how Tony assists startups.…

Risk and Reels: A Cybersecurity Podcast

1
Getting the Cybersecurity Budget you Need Doesn't Just Happen 31:31

51 weeks ago31:31

31:31

In this episode, Jeffrey talks with Ira Winkler, CISO for CYE. They discuss their favorite low-budget movies and strategies for convincing decision-makers to approve the cybersecurity budgets necessary to comprehensively address risk.

Risk and Reels: A Cybersecurity Podcast

1
The Risk & Reels Mix Tape — Some of our Favorite Guests 33:34

1 year ago33:34

33:34

From time to time, it’s fun to look back and share snippets from some of our best conversations on the podcast. In this episode, you’ll hear cool insight from Ang Brown, Team Leader at TCS Security, Dave Mahdi, CIO of Transmit Security and Anna Belak, Director of the Office of Cybersecurity Strategy of Sysdig. There’s lots of movie talk and exciting insight into career journeys, the importance of standards and being able to communicate with diverse audiences.…

Risk and Reels: A Cybersecurity Podcast

1
From Outsider to Cybersecurity Insider — Leaning into the Power of Transitions 30:20

1 year ago30:20

30:20

In this episode, Jeffrey talks to Mariana Padilla, co-founder and CEO of HACKERVERSE. Jeffrey and Mariana discuss movies (and TV shows) where the main character goes through a significant transition, Mariana’s journey from marketing to the security industry and the integration of AI and security solutions.…

Risk and Reels: A Cybersecurity Podcast

1
Are You Really You? The Fascinating World of Identity Access Management 29:47

1 year ago29:47

29:47

In this episode, Jeffrey talks to Rick Patterson, CISO at CLEAR. They discuss movies about mistaken identities, the challenges and future of identity access management and a bizarre identity swap case from Rick’s time in the Secret Service.

Risk and Reels: A Cybersecurity Podcast

1
Everything is an Endpoint — and Other Zero Trust Insight 26:17

18 weeks ago26:17

26:17

In this episode, Jeffrey talks to Jessica Dapelo , a zero trust expert and founder of Jessica Dapelo Enterprises , a consulting firm specializing in cybersecurity guidance for public sector organizations and agencies. They discuss movies about the convergence of two worlds, the importance of understanding zero trust as a proactive cybersecurity methodology, the implications of ethical AI on data privacy and the need for organizations to be aware of their data storage and access permissions.…

Risk and Reels: A Cybersecurity Podcast

1
We Really Need to Shake S*** Up in Cybersecurity Research and Insight 31:39

19 weeks ago31:39

31:39

In this episode, Jeffrey speaks with cybersecurity marketing extraordinaire Dani Woolf , co-founder of CyberSynapse and CEO/host of the Audience 1st podcast . They discuss movies where the main character rocks the status quo, the unique challenges of marketing in the cybersecurity space, the shortcomings of traditional analyst models and the importance of direct customer engagement. The conversation also touches on the necessity of collaboration within the cybersecurity community and the common pitfalls smaller vendors face when trying to penetrate the enterprise market.…

Risk and Reels: A Cybersecurity Podcast

1
Yes, CISOs Should Be Ethical — But Maybe We Stop Lying To Them 46:24

22 weeks ago46:24

46:24

In this episode, Jeffrey talks to Robert “RSnake” Hansen, Managing Director at Grossman Ventures. He’s also a computer hacker, executive and entrepreneur. He’s most well-known for his security research and disclosures such as Slowloris, Clickjacking, Fierce DNS enumeration tool and others. RSnake produces a wide range of security content including The RSnake Report newsletter, a podcast called The RSnake Show and a book entitled AI’s Best Friend . Jeffrey and Robert discuss movies where a main character struggles with an ethical dilemma, the temptations for CISOs to act unethically and how companies should support CISOs to minimize the prevalence of those temptations.…

Risk and Reels: A Cybersecurity Podcast

1
Turtles All the Way Down — Looking for Third-Party Risk in DORA 32:46

23 weeks ago32:46

32:46

In this episode, Jeffrey Wheatman talks to Sandra Saliba , TPP Governance Manager at APS Bank. Jeffrey and Sandra dig into the Digital Operational Resilience Act (DORA), the implications of DORA for financial institutions, and the importance of managing third-party risk in the face of increasing cyber threats.…

Risk and Reels: A Cybersecurity Podcast

1
Enough With the Cybersecurity Gatekeeping — Be a Genuine Mentor 32:17

24 weeks ago32:17

32:17

In this episode, Jeffrey talks with Dave Ruiz — aka “CyberDAve” — cybersecurity leader for the Public Works Commission in Fayetteville, North Carolina. Dave is an Army veteran with over 20 years of experience in information assurance and security, governance risk and compliance and IT/OT Security. And he plays a mean guitar. Jeffrey and Dave discuss movies in which a mentor/mentee relationship is critical to the plot, how gatekeeping is detrimental to the future of cybersecurity and why genuine mentorship is so important to move the industry forward.…

Risk and Reels: A Cybersecurity Podcast

1
Hey, Cybersecurity Pros: Complexity is the Enemy of Execution 31:57

25 weeks ago31:57

31:57

In this episode, Jeffrey talks to Edgar Jones , co-founder of Luminated in Thought — aka L.I.T. — an organization specializing in individual and group coaching for professionals. Edgar uses his background and lessons learned as a former NFL player to help professionals take on overwhelming situations and determine a clear path to breaking through complexity. He and Jeffrey discuss movies where a character exhibits leadership traits, navigating conflict via communication skills and how the best leaders are those who make connections — and how it all relates to cybersecurity.…

Risk and Reels: A Cybersecurity Podcast

1
Navigating Bias — Cybersecurity’s Crooked Mirror 33:08

26 weeks ago33:08

33:08

In this episode, Jeffrey talks to Dr. Dustin Sachs , Chief Technologist and Sr. Director of Programs at the CyberRisk Collaborative . They discuss movies in which a main character’s misunderstanding of a situation creates chaos, then dive into Dustin’s extensive scholarly research on bias and explore its impact on making sound cybersecurity decisions.…

Risk and Reels: A Cybersecurity Podcast

1
Helping CISOs Communicate Their Way To Positive Outcomes 30:10

27 weeks ago30:10

30:10

In this episode, Jeffrey talks to Rock Lambros , founder and CEO of RockCyber . Along with coaching CISOs and serving as a vCISO, Rock is also a published thought leader, co-authoring the book, “ The CISO Evolution: Business Knowledge for Cybersecurity Executives .” Rock and Jeffrey talk about “little fish in a big pond” movies, the evolving landscape of cybersecurity for SMBs, transitioning from management to leadership in cybersecurity and the need for effective communication and collaboration between cybersecurity and operational teams.…

Risk and Reels: A Cybersecurity Podcast

1
The Art of Throwing the (Calculated) Cybersecurity Hail Mary 33:14

28 weeks ago33:14

33:14

In this episode, Jeffrey talks to Mel Reyes , CEO of Elite Technical Concierge . Mel’s background is deep, with expertise in helping organizations build successful security programs with limited resources. He also heads a nonprofit organization, Fellowship of Digital Guardians that seeks to elevate awareness of IT, cybersecurity and compliance domains among individuals and organizations. Jeffrey and Mel discuss movies with unlikely heroes, the need for speed and agility in defense strategies and why innovative — and sometimes risky — ideas are critical to cybersecurity success.…

Risk and Reels: A Cybersecurity Podcast

1
What the Military’s “Elegant and Brutal” Model Can Teach Us About Cybersecurity 30:58

29 weeks ago30:58

30:58

In this episode, Jeffrey talks to Cindy Seipert , an InfoSec GRC analyst at Health Catalyst. They discuss movies that challenge our identity, Cindy’s unique career path from the military to the tech industry and her experiences as a woman in cybersecurity.

Risk and Reels: A Cybersecurity Podcast

1
You’ve Got To Be Audacious To Succeed 30:25

30 weeks ago30:25

30:25

In this episode, Jeffrey talks with Keren de Via , Go-to-Market Director at Cyturus Technologies. Keren has a deep cybersecurity background and was the first female Combat Communications and Cyber Defense Officer in the Israel Defense Forces. They discuss movies where a character experiences a perspective-shifting transformation, Keren’s transition from military to civilian life and the importance of overcoming imposter syndrome.…

Risk and Reels: A Cybersecurity Podcast

1
What Better Time Than Now? (And Other Considerations for Aspiring Security Professionals) 28:28

31 weeks ago28:28

28:28

In this episode, Jeffrey talks to Tanara Burke-Lloyd, SOC Analyst at Littler, the largest global employment and labor law practice. They discuss “fish out of water” movies, her inspiring journey into cybersecurity and the importance of mentorship, documentation and understanding the actual problems in cybersecurity.…

Risk and Reels: A Cybersecurity Podcast

1
Why “Always Be Collaborating” Should Overshadow “Always Be Closing” in Security Sales 27:17

32 weeks ago27:17

27:17

In this episode, Jeffrey talks to entrepreneur and four-time CISO Demetrios Lazarikos — aka Laz. Laz is the founder and IT security consultant of Blue Lava Consulting. They discuss why security salespeople should look for ways to solve problems instead of focusing solely on closing and how CISOs can better communicate to a wider audience.…

Risk and Reels: A Cybersecurity Podcast

1
How CISOs Manage Risk Acceptance 29:42

33 weeks ago29:42

29:42

In this episode, Jeffrey talks to Evelin Biro , a CISO advisor and cybersecurity expert. They discuss movies where a character goes through a significant life change, the role risk acceptance plays for CISOs and the difficult disconnect between regulatory requirements and business expectations.

Risk and Reels: A Cybersecurity Podcast

1
AppSec Ain’t Easy — But it Doesn’t Have to be Impossible 30:07

34 weeks ago30:07

30:07

In this episode, Jeffrey talks to Pete Chestna, Checkmarx's CISO of the Americas. They discuss movies in which a character feels threatened by the introduction of a new character, why successful AppSec requires better security/developer symbiosis and how CISOs take on the myriad challenges they face.…

Risk and Reels: A Cybersecurity Podcast

1
Want to be a Successful CISO? Know Your Audience 31:06

1 year ago31:06

31:06

In this episode, Jeffrey talks to Marcos Marrero, CISO at H.I.G. Capital. Jeffrey and Marcos discuss their favorite music-themed movies, how CISOs must move at the same speed as the business and the importance of being a master communicator.

Risk and Reels: A Cybersecurity Podcast

1
There’s No Excuse to Ignore Supply Chain Cyber Risk 31:55

1 year ago31:55

31:55

In this episode, Jeffrey talks to JC Dodson, former CSO for BAE Systems and the founder of global risk, resilience, and response advisory firm JCarl Group. Jeffrey and JC discuss movies where characters are confronted with new and challenging situations, the evolution of supply chain security and the critical nature of presenting cyber risks as a business concern.…

Risk and Reels: A Cybersecurity Podcast

1
The Intersection of OT and ICS Security 38:18

1 year ago38:18

38:18

In this episode, Jeffrey talks to Mike Holcomb, Fellow of Cybersecurity and the ICS/OT Cybersecurity Global Lead for Fluor — one of the world's largest construction and engineering firms. Jeffrey and Mike discuss movies highlighting the clash of two worlds and the convergence of operational technology (OT) security and industrial control systems (ICS) security.…

Risk and Reels: A Cybersecurity Podcast

1
The Art of Managing — and Communicating — Third-party Security Risks 31:26

1 year ago31:26

31:26

In this episode, Jeffrey talks to Phillip Addison, manager of third-party cyber risk management for The Hershey Company. Jeffrey and Phillip discuss buddy movies, key players in maintaining a secure ecosystem and tips for communicating third-party cyber risk to the C-Suite.

Risk and Reels: A Cybersecurity Podcast

1
What Makes a Great Modern CISO? 36:47

1 year ago36:47

36:47

In this episode, Jeffrey talks to Joe Head, a CISO coach and mentor with Intaso. They discuss “fish out of water” movies, the challenges related to being a CISO and advice for aspiring CISOs.

Risk and Reels: A Cybersecurity Podcast

1
Pearls of Wisdom from a ‘Been There, Done That’ CISO 40:11

1 year ago40:11

40:11

In this episode, Jeffrey talks to six-time CISO — and respected security thought leader — Jim Routh. They cover movies where miscommunication plays a major role in the plot, the scrutiny CISOs are under and the importance of crisis communication training.

Risk and Reels: A Cybersecurity Podcast

1
The Ins and Outs of Fractional CISOs 36:07

1 year ago36:07

36:07

In this episode, Jeffrey speaks to Carlota Sage, founder and CEO of Pocket CISO, to discuss obscure movies with Elvis characters, the emergence of Fractional CISOs and the unique security challenges she’s solving for SMB clients.

Risk and Reels: A Cybersecurity Podcast

1
The Funniest — or “Least Boring” — Man in Cybersecurity 38:45

1 year ago38:45

38:45

In this episode, Jeffrey talks to Keyaan Williams, Founder and CEO of Cyber Leadership and Strategy Solutions on his affinity for “The Long Kiss Goodnight,” his inspiration for becoming a cybersecurity professional and why he coins himself “The Funniest Man in Cybersecurity.”

Risk and Reels: A Cybersecurity Podcast

1
Have Your CISO's Back 40:35

1 year ago40:35

40:35

In this episode Jeffrey speaks with David Anderson, vice president of cyber at Woodruff Sawyer to discuss why he dislikes heist movies, his love for romantic comedies, and how the cyber insurance business works.

Risk and Reels: A Cybersecurity Podcast

1
The Unpredictable Career Trajectory of a Cyber Professional 34:49

1 year ago34:49

34:49

Steve Magowan, CISO and CISSP and Jeffrey Wheatman talk about their favorite movies with a small world and how to build a career in cyber security.

Risk and Reels: A Cybersecurity Podcast

1
How to Make Businesses Care about Security 36:45

1 year ago36:45

36:45

Dr. Anna Belak, director, office of cybersecurity at Sydig and Black Kite's Jeffrey Wheatman discuss how to make security a business priority.

Risk and Reels: A Cybersecurity Podcast

1
Finding your Path 42:02

1 year ago42:02

42:02

Ang Brown from TCM Security and Jeffrey Wheatman talk career paths and finding security.

Risk and Reels: A Cybersecurity Podcast

1
Positivity, Privacy, and Pressure 37:56

1 year ago37:56

37:56

Debbie Reynolds the Data Diva and Founder for Debbie Reynolds Consulting, and Jeffrey Wheatman talk about privacy in our modern world.

Risk and Reels: A Cybersecurity Podcast

1
The Unlikely Hero 41:14

1 year ago41:14

41:14

Jason Ozin, CISO for PIB Group joins Jeffrey Wheatman, SVP Security Evangelist for Black Kite to discuss unlikely heroes and the role of the CISO.

Risk and Reels: A Cybersecurity Podcast

1
Heists, Fraud and Cons; Oh My! 37:16

2 years ago37:16

37:16

During this Podcast Jonathan Care, Advisor at Lionfish and former Gartner Analysts, talks scams, cons and frauds and why they still work.

Risk and Reels: A Cybersecurity Podcast

1
Can You See the Real Threats? | S2 Ep. 9 with Patrick Garrity 34:03

2 years ago34:03

34:03

Patrick Garrity talks about the real threats, prioritizing vulnerabilities and movies where someone thinks they know what is going on and is wrong.

Risk and Reels: A Cybersecurity Podcast

1
Tackling Risk | S2 Ep. 8 with Tomás Maldonado 33:29

2 years ago33:29

33:29

Join us as Tomas Maldonado, CISO for the NFL and Jeffrey Wheatman, Black Kite Cyber Risk Evangelist discuss the best sports movies, the challenges of securing a league of disparate teams and collaboration for better security.

Risk and Reels: A Cybersecurity Podcast

1
Building a Successful Security Program from Scratch | S2 Ep. 7 with George Al-Koura 39:02

2 years ago39:02

39:02

During this episode George Al-Koura, CISO at Ruby and co-host of the Bare Knuckles & Brass Tacks podcasts shares his insights on building security programs from scratch.

Risk and Reels: A Cybersecurity Podcast

1
The Overlap of Physical Security into Digital | S2 Ep. 6 with Angela Dogan 35:54

2 years ago35:54

35:54

Meet Dr. Angela Dogan, the Associate Director for IT Cloud Computing at Kyndryl. Join us to talk about the Halloween movies, twists and turns, physical security, the evolution of physical security, cyber risk/posture, and the move to the cloud.

Risk and Reels: A Cybersecurity Podcast

1
Security Operations: Learning what works | S2 Ep. 5 with Anton Chuvakin 37:54

2 years ago37:54

37:54

Meet today's guest: Dr. Anton Chuvakin, an advisor at the Office of the CISO of Google Cloud. Join us to chat about sci-fi movies, technology predictions, security operations, solving security problems, three lines of defense, AI and using the cloud.

Risk and Reels: A Cybersecurity Podcast

1
Security Architecture and what the structure entails | S2 Ep. 4 with Evgeniy Kharam 43:08

2 years ago43:08

43:08

Jeffrey Wheatman is joined in this episode by Evgeniy Kharam, a fellow Cyber Evangelist! Today we are discussing learning from your mistakes, Avatar, CGI, New Zealand, firewalls, and security architecture.

Risk and Reels: A Cybersecurity Podcast

1
Why open standards matter for streamlined cybersecurity | S2 Ep. 3 with David Mahdi 42:01

2 years ago42:01

42:01

This week we have Jeffrey's old friend and colleague: Dave Mahdi, the current CIO (Chief Identity Officer) for Transmit Security. Join us to chat about movies (Natalie Portman's first film!), Ted Lasso, good guys vs. bad guys, and why standards (and open standards) matter in the world of cybersecurity when prioritizing risk resilience.…

Risk and Reels: A Cybersecurity Podcast

1
Prioritizing cybersecurity in the world of CISO burnout | S2 Ep. 2 with Rob Black 43:05

2 years ago43:05

43:05

In this episode, join Jeffrey and Rob Black, CISSP, the founder and CEO of Fractional CISO. Buckle up to talk about Stephen King, Barbenheimer, and the main topic of CISO burnout/stress and how to combat it in our new cyber environment while still prioritizing security leadership.

Risk and Reels: A Cybersecurity Podcast

1
Cybersecurity in the realm of Higher Education around the world | S2 Ep. 1 with Luqman Kondeth 37:06

2 years ago37:06

37:06

Welcome to SEASON TWO of Risk and Reels! Get ready to talk about Indian film festivals, Abu Dhabi, cyber security within higher education (with an emphasis on third party cyber risk), and plenty of side stories. In episode one, Jeffrey Wheatman brings his good friend and colleague Luqman Kondeth to the show. He is the Director of Campus Technology Security Services for NYU Abu Dhabi.…

Risk and Reels: A Cybersecurity Podcast

1
The Bright Future of Public/Private Partnership in Cybersecurity | SEASON 1 FINALE Ep. 17 with Bailey Bickley 35:14

2 years ago35:14

35:14

True crime, storytelling, Big Fish, the partnership between private sector and public sector, the new White House cybersecurity policy, power of strong minds in one room, resilience and redundancy, threat actors worldwide, and supply chain risk and security. We are thrilled to share this episode with special guest, Bailey Bickley, the Chief DIB Defense at the NSA.…

Risk and Reels: A Cybersecurity Podcast

1
From the Military to IT and Cybersecurity | Ep. 16 with Lewis Heuermann 42:33

2 years ago42:33

42:33

Charlie and the chocolate factory, Tom Hanks, the Military, culture shifts, precision, training, accountability, the why for the what. Join Jeffrey Wheatman and Lewis Heuermann (current Cyber Risk Management leader at Booz Allen Hamilton) as they discuss what it looks like to move from a life in the service to a post-military role in cybersecurity, as well as stories and moments along the way.…

Risk and Reels: A Cybersecurity Podcast

1
Investing in Cyber and AI in 2023 | Ep. 15 with Rick Grinnell 37:57

2 years ago37:57

37:57

Comedies, Young Frankenstein, History of the World, artificial intelligence, investments in cybersecurity, AI investors, third party risk, ChatGPT, the future of jobs in cyber. Hear from Rick Grinnell, the Founder of Glasswing Ventures (an investor of Black Kite!)

Risk and Reels: A Cybersecurity Podcast

1
Cybersecurity in Higher Education – over the years and today | Ep. 14 with Gretchen Ruck 36:34

2 years ago36:34

36:34

80s movies, Animal House, cyber in higher education, university CISOs, managing student data, healthcare within universities, compliance requirements, HECVAT, Educause, Today's episode features Gretchen Ruck, Senior Managing Director of Cybersecurity & Privacy at Ankura.

Risk and Reels: A Cybersecurity Podcast

1
The People of Cyber: Diversity, Education and Empowerment | Ep. 13 with Juliana Vida 47:27

2 years ago47:27

47:27

The Admiral, A Christmas Story, new policies, the New White House Cybersecurity Policy, information security importance, DEI, diversity in cyber, government training, empowering the people, poker, hiring, and zero trust. Welcome Juliana Vida to today's episode - she currently runs strategy for Public Sector at Splunk.…

Risk and Reels: A Cybersecurity Podcast

1
How to use cybersecurity tools properly to meet regulations | Ep. 12 with Larry Whiteside 41:41

2 years ago41:41

41:41

Crafty hackers, super-smart villains, speaking the business language, GRC tools, risk and regulatory correlations, reg ops, being compliant, meeting regulations, and why vendors can't solve all your problems. This episode, features Larry Whiteside, the current CISO at RegScale and long-time friend of Jeffrey Wheatman.…

Risk and Reels: A Cybersecurity Podcast

1
Building a third-party risk program from the ground up | Ep. 11 with Tom Garrubba 1:11:05

2 years ago1:11:05

1:11:05

SPECIAL double-time episode. Hear from Tom Garrubba, the Director of Third-Party Risk Management Services at Echelon Risk + Cyber and he talks through the journey of building a third party risk management program at CVS Caremark (plus everything after and in-between.) Plus, as always, movies (JAWS), Saturday night theater showings, Franco, and Schwarzenegger.…

Risk and Reels: A Cybersecurity Podcast

1
Threat Modeling in STRIDE, the basis for cybersecurity. | Ep. 10 with Matt Stamper 38:31

2 years ago38:31

38:31

Forrest Gump, threat modeling, animal farm, application weaknesses, business impact analyses, resilience, accountability, and stride. Tune into the latest episode to hear from Matt Stamper, the CEO of Executive Advisors Group.

Risk and Reels: A Cybersecurity Podcast

1
Productive risk processes = truly reducing risk. How has TPRM shifted? | Ep. 9 with Bob Maley 33:38

2 years ago33:38

33:38

Star Wars, Star Trek, third party risk management, fallen heroes, best practices, triaging risk, cyber posture, the cloud, vendor access, productive risk process, and truly managing risk. How has third party risk management changed in the last 20 years? How should it be changing to promote better processes? Join Jeffrey Wheatman and Bob Maley, CSO of Black Kite, for this exciting discussion.…

Risk and Reels: A Cybersecurity Podcast

1
Talking with the former Director of Cybersecurity Coordination for the U.S. Dept. of Homeland Security | Ep. 8 with Mike Brown 41:13

2 years ago41:13

41:13

Jeffrey speaks with the former Director of Cybersecurity Coordination for the U.S. Dept. of Homeland Security, Mike Brown, about strategic, tactical, and operational cybersecurity.

Risk and Reels: A Cybersecurity Podcast

1
With a plethora of emerging AI, where does the cybersecurity industry stand? | Ep. 7 with Eric Cowperthwaite 46:03

2 years ago46:03

46:03

Musicals, emerging AI, and understanding the risk within your third-party ecosystem. Our guest this week is Eric Cowperthwaite, COO at Threathunter.ai by Milton Security.

Risk and Reels: A Cybersecurity Podcast

1
Managing the risk you quantify is half the battle | Ep. 6 with David Elfering 30:28

2 years ago30:28

30:28

Black and white films, photography, risk quantification, FAIR, (ROI), the business case for risk, risk scenarios, sea monsters, and PII. Our guest this week is David Elfering, Sr. VP and Sr. Cybersecurity Specialist at Marsh.

Risk and Reels: A Cybersecurity Podcast

1
It’s the dog that caught the car - how can security programs properly mature? | Ep. 5 with Dave Lewis 39:29

2 years ago39:29

39:29

John wick, curiosity, organizational changes over time, security debt, risk appetite, chatGPT, dogs running around, and taking security seriously. Join Jeffrey Wheatman and Dave Lewis, (Global Advisory CISO at Cisco), as they discuss what it means for security teams to mature and address accepted risks that need to be revisited. As security is taken more seriously overall, leaders must adjust programs to complement that.…

Risk and Reels: A Cybersecurity Podcast

1
The anatomy of the 2023 Black Kite Third Party Breach Report | Ep. 4 with Ferhat Dikbiyik 35:28

2 years ago35:28

35:28

Third party attacks, common ways hackers target companies, Turkish movies, outsmarting the bad guys, and the trajectory of 2023 data breaches. Listen to episode four as Jeffrey Wheatman and the Head of Research at Black Kite, Ferhat Dikbiyik discuss the latest Third Party Data Breach report (and its astonishing findings).…

Risk and Reels: A Cybersecurity Podcast

1
“We’ve always done it that way.” Why we shouldn’t. | Ep. 3 with Patti Titus 36:41

2 years ago36:41

36:41

Risk and Reels: A Cybersecurity Podcast

1
Security starts with people. Process requires purpose. | Ep. 2 with Brian Reed 35:24

2 years ago35:24

35:24

People, process, tools, tech, Ocean’s Eleven, movie remakes, and a recession. Security is people-centric, and tools cannot exist independently. Learn why we must humanize our problems first. Tune into episode 2 with Jeffrey Wheatman and guest Brian Reed (Senior Director of Cybersecurity Strategy at Proofpoint).…

Risk and Reels: A Cybersecurity Podcast

1
Who's a hacker? | Ep. 1 with Jayson Street 47:22

2 years ago47:22

47:22

Hackers, curiosity, security, pen-testers, kindness, analogies and Hollywood criminals. Welcome to the first episode of Risk and Reels with Jeffrey Wheatman, featuring Jayson Street (OG Pen Tester and Chief Chaos Officer for Trusec), a self-proclaimed hacker.

Risk and Reels: A Cybersecurity Podcast

1
Introducing Risk and Reels: A Cybersecurity Podcast 1:05

2 years ago1:05