View this email in your browser

My first security newsletter!

In late January I started a series on Forbes where I examined the relationships between buyers and sellers of cybersecurity products. What I saw was a natural conflict. The two parties were mutually dependent, yet there was an asymmetrical relationship: thousands of security vendors were targeting a very small group of CISOs.

The podcast

In addition to producing the articles and videos, I recently launched a podcast with Mike Johnson, CISO of Lyft, who helped inspire this series. Mike has sparked numerous public conversations on LinkedIn about the relationship between CISOs and vendors, which made him my first choice when picking a co-host for a podcast on this very topic. 

This week's episodeWe Have the Silver Bullet for BS Detection

The title of this week's episode refers to Mike's irritation when vendors claim they can detect any breach. It's simply not possible.

You'll hear Mike complain about that, and discuss:

• Are millennials excited about working in security? And what can we do about it?

• How should vendors invest in big trade shows, like RSA and Black Hat?

• Breach detection and the use of deception devices.

• When a breach happens, should you or shouldn’t you blame the victim?

• How should security sales managers pump up their team for sales?

Our guest this week is Haroon Meer, founder and researcher of Thinkst, makers of Canary deception devices. 

This episode is sponsored by

Thinkst

. Enormous thanks for making this episode and newsletter possible.

Subscribe to the podcast

Got a podcast catcher? Search for "CISO" and chances you'll find the CISO/Security Vendor Relationship Podcast. If it doesn't come up, go ahead and click on any of these links to subscribe to the feed.

• iTunes

• Google Play

• Stitcher

• RSS Feed

If you're already a subscriber, THANK YOU! If you like the show, please write a review.

Listener contributions

I am always looking for contributions from listeners. Please reply to this email, and send me any of the following:

• “Ask a CISO” question.

• A vendor pitch you want us to critique (let me know if you want to be anonymous or not).

• A hot security discussion (please provide a link).

• A quick security tip.

• A big industry story for which you want to know what that story means to security professionals.

• An idea for a new segment for the show!

Sponsor the show!

We've been extremely fortunate to have a number of vendors eager to sponsor the show. If you'd like to sponsor the show, please feel free to reply to this email.