CISO Series
David Spark
Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else.
Recent Episodes
See, Our Compliance Framework Includes a Checkbox for Resilience
Aug 4, 2026Khush Kashyap, Senior Director of GRC at Vanta, joins David Spark and Mike Johnson (CISO, Rivian) to discuss security team resilience, risk quantification beyond dollar amounts, and the future of AI-driven compliance frameworks. The episode challenges traditional compliance-first approaches, exploring how security posture should drive compliance as a byproduct rather than the inverse, and examines practical paths to automating GRC work without burning out teams.
Why Don't You Tell Me Which Metrics Sound Most Impressive?
Jul 28, 2026Pavi Ramamurthi, Global CSO and CIO at Blackhawk Network, joins the CSO Series to discuss vanity metrics in security, the perverse incentives in SIEM and compliance reporting, and the Delve audit scandal. The episode explores how security leaders balance political necessity with honest risk communication, the theater of SOC 2 compliance, and the flaws in third-party risk management questionnaires.
With AI, I Can Now Be Pulled in 5x More Directions at Once!
Jul 21, 2026Terry Daniel, Principal at Udia, joins David Spark and Andy Ellis to discuss how AI is transforming security work—multiplying tasks and cognitive load rather than simply lightening workloads. The episode explores burnout risks in security teams, the gap between stated security culture and actual employee behavior, the dangers of LLMs reinforcing leadership blind spots, and how organizational trust directly impacts insider risk programs and employee loyalty.
ClickLock's kill loops, TELEPUZ ClickFix tricks, 1Password's agentic login
Jul 17, 2026Protecting AI Agents in O365 and Google Workspace
Jul 16, 2026Zoom's wake-up call, zero-day SonicWall patch, 23andMe's growing breach bill
Jul 16, 2026CMMC Phase II suspended, tracking troops in Iran, defenders turn to context bombing
Jul 15, 2026The Only Thing Worse Than Technical Debt is Newly Discovered Technical Debt
Jul 14, 2026Russia's router access routes, MemGhost haunts AI memory, DHS alert got waved off twice
Jul 14, 2026Multifunction Windows backdoor, NSA revives TAO, urgent ShareFile warning
Jul 13, 2026
Show artwork and metadata belong to the publisher and are shown here editorially, as part of documenting the corpus behind our analyses. Inclusion does not imply any endorsement of, or by, MeetBri.