Welcome to another insightful episode of CISO Tradecraft! In this episode, host G Mark Hardy engages with Aimee Cardwell, an accomplished cybersecurity expert with an impressive portfolio including UnitedHealth Group, AMEX, eBay, and more. Tune in as they dive deep into the increasing concerns of privacy, the evolving role of AI in cybersecurity, and the importance of data governance. Learn practical strategies for managing the complexities of AI and privacy, explore the intersections between cybersecurity and privacy, and get invaluable tips for aspiring CISOs. Don't miss this episode packed with expert advice and forward-thinking perspectives! Aimee Cardwell's Linkedin - https://www.linkedin.com/in/acardwell/ Chapters 01:07 Guest Background and Career Journey 03:00 Cybersecurity and Privacy Integration 08:04 AI's Impact on Cybersecurity and Privacy 12:32 Data Retention Challenges and Solutions 17:56 Improving Data Visibility 19:28 GDPR Compliance and Data Breaches 19:55 Challenges of Data Management in Large Enterprises 21:02 AI and Cloud Governance 22:52 Encouraging AI Literacy in the Workplace 25:39 AI Policy and Legal Protections 28:56 AI's Limitations and Risks 31:48 The Importance of AI Literacy Across Functions 35:23 Final Thoughts and Advice for CISOs
--------
37:27
--------
37:27
#253 - DARPA’s AI Cyber Challenge Unveiled (with Andrew Carney)
Dive into an exciting discussion on CISO Tradecraft as host G Mark Hardy engages with DARPA's AI Cyber Challenge director, Andrew Carney. Learn about the world of autonomous systems capable of identifying and fixing vulnerabilities at an unprecedented speed and scale. Discover the highs and lows of AIxCC's two-year journey, its groundbreaking impact on cybersecurity, and the potential it holds for the future. Whether you're a seasoned CISO or just passionate about cybersecurity, this episode is packed with insights on leveraging AI to protect critical infrastructure and defend against cyber threats. Don't miss it! https://aicyberchallenge.com/
--------
26:56
--------
26:56
#252 - Master Storytelling for CISOs (with Neal Foard)
Join us in this captivating episode of CISO Tradecraft as host G Mark Hardy sits down with storytelling maestro Neal Foard. Learn the secrets of impactful storytelling straight from Neal, who shares an engaging story about an unforgettable lesson at the New Jersey State Fair. Delve into the importance of emotions in storytelling, glean tips for effective communication, and discover how being an inspiring leader can propel your cybersecurity career. Don't miss this opportunity to enhance your storytelling prowess and become a more effective cybersecurity leader!
--------
1:06:06
--------
1:06:06
#251 - AI Just Changed Data Security Requirements with Ronan Murphy
Learn how to elevate Data Protection in the Age of AI with Ronan Murphy In this episode of CISO Tradecraft, host G Mark Hardy and guest Ronan Murphy, Chief Strategy Officer at Forcepoint, discuss the critical importance of data protection for enterprises in the age of AI. Discover expert insights on common mistakes CISOs make, how AI revolutionizes data security, and the evolving role of CISOs from enforcers to strategists. Learn about effective data governance, AI’s impact on data, and leveraging tools like DLP & CASB for robust cybersecurity.
Plus, hear about Forcepoint Aware 2025 and actionable strategies for elevating your organization's data security posture. https://www.forcepoint.com/aware
Chapters
00:00 Introduction: The Importance of Data Security
00:26 Meet the Expert: Ronan Murphy's Background
02:40 Challenges in Data Protection
04:01 The Role of AI in Data Security
06:26 Strategies for Effective Data Management
19:05 Understanding Data Loss Prevention (DLP)
20:36 Exploring Cloud Access Security Brokers (CASB)
24:37 Data Security Posture Management (DSPM)
38:36 The Future Role of CISOs
40:30 Conclusion and Upcoming Events
--------
43:51
--------
43:51
#250 - Understanding Vulnerabilities, Exploits, and Cybersecurity
Join host G Mark Hardy on CISO Tradecraft as he welcomes Patrick Garrity from VulnCheck and Tod Beardsley from Run Zero to discuss the latest in cybersecurity vulnerabilities, exploits, and defense strategies. Learn about their backgrounds, the complexities of security research, and strategies for effective communication within enterprises. The discussion delves into vulnerabilities, the significant risks posed by ransomware, and actionable steps for CISOs and security executives to protect their organizations. Stay tuned for invaluable insights on cybersecurity leadership and management.
Chapters
00:00 Introduction and Guest Welcome
00:57 Meet Patrick Garrity: Security Researcher and Skateboard Enthusiast
02:12 Meet Todd Beardsley: From Hacker to Security Research VP
03:58 The Evolution of Vulnerabilities and Patching
07:06 Understanding CVE Numbering and Exploitation
14:01 The Role of Attribution in Cybersecurity
16:48 Cyber Warfare and Global Threat Landscape
20:18 The Rise of International Hacking
22:01 Delegation of Duties in Offensive Warfare
22:25 The Role of Companies in Cyber Defense
23:00 Attack Vectors and Exploits
24:25 Real-World Scenarios and Threats
28:46 The Importance of Communication Skills for CISOs
31:42 Ransomware: A Divisive Topic
38:39 Actionable Steps for Security Executives
45:58 Conclusion and Final Thoughts