02-04-20 - You're Mistaken. I'm Not Annoying. It's Chutzpah.

You're Mistaken. I'm Not Annoying. It's Chutzpah.

CISO | Security Vendor Relationship Series

This week's episode of CISO/Security Vendor Relationship Podcast

You're Mistaken. I'm Not Annoying. It's Chutzpah.

You're Mistaken. I'm Not Annoying. It's Chutzpah.

 was recorded in front of a live audience at a WeWork location in Tel Aviv. My special guest co-host on this episode is Bobby Ford, global CISO, Unilever. Our guest is John Meakin, CISO, Equiniti. The three of us discussed:

Israelis' common cybersecurity language provides a head start.

Given Israel's mandatory three-year military service for high-school graduates, all Israelis have a strong understanding of security. For those who train in the elite cybersecurity 8200 unit, all have a basic understanding of cybersecurity at a very young age.

Of all the reasons a CISO takes a meeting, a cold call is not one of them.

CISOs take meetings because:

  1. They have an existing relationship

  2. They got a recommendation from a trusted relationship

  3. They're trying to fix a problem

  4. They've been researching the topic

A little research goes a long way to build trust with a CISO.

When you do get a meeting, a CISO is going to appreciate that you've done your research on their company. They'll want you to provide some more information beyond a sales pitch and explain clearly how you're positioned in the market.

Get a 360-degree/24-hour view of your employees' online habits.

Your company's overall cybersecurity exists beyond work hours and the four walls of your organization. Get personal with your coworkers' habits when they leave the office. Don't intrude into their lives, but rather make sure they're adhering to and care about good cybersecurity practices even when they're not at work.

Huge thanks to Glilot Capital one of Israel's leading cybersecurity-focused venture capital firms, for hosting CISO/Security Vendor Relationship Podcast in Tel Aviv.

Glilot Capital

Special thanks to this week's CISO/Security Vendor Relationship Podcast sponsors, Polyrize and IntSights.

Polyrize

As newly adopted SaaS and IaaS services add an additional layer of risk for security teams, Polyrize provides a cloud-centric approach to simplifying the task of protecting user identities and their access across the public cloud by right-sizing their privileges and continuously protecting them through a unified authorization model.

 

IntSights

IntSights is revolutionizing cybersecurity operations with the industry’s only all-in-one external threat protection platform designed to neutralize cyberattacks outside the wire. Our unique cyber reconnaissance capabilities enable continuous monitoring of an enterprise’s external digital profile across the clear, deep, and dark web to identify emerging threats and orchestrate proactive response. To learn more, visit intsights.com.

Elliot Lewis, CEO, Encryptics on common mistakes CISOs make in front of the board

How are you going to make this RSA better than the last one?

The annual RSA conference is the gravitational pull that brings cybersecurity professionals together in one location every year. Many carp on the circus-like quality of the event, but whether you like the show or not, most of the smartest minds in cybersecurity come together in one physical location. That in itself is a huge advantage. When I talk with cybersecurity marketers, they're looking for the one gimmick, invite, booth design, giveaway, or engagement that will attract this very targeted audience.What are your plans to make this year better/different/more valuable than past years? Let me know! 

Allan Alford on trying to get a clear definition of risk from the board

SUBSCRIBE TO BOTH PODCASTS

Go ahead and click on any of these links to subscribe to the podcast feed of your favorite podcast catcher.

If you're already a subscriber, THANK YOU! If you like either or both shows, please tell all your friends on social media and write a review on iTunes.