What’s the Value of Certifications?

What’s the Value of Certifications?

August 05, 2021

CISO Series

There is no Video Chat this week due to BlackHat & DefCon, but join us next Friday [08-13-21], for "Hacking Cloud Infrastructure"

Join us next Friday August 13 for "Hacking Cloud Infrastructure

Our discussion will be

"Hacking Cloud Infrastructure: An hour of critical thinking about how identity is your front line of defense for your infrastructure."

It all begins at 10 AM PT/1 PM ET on Friday, August 13, 2021, with guests Arick Goomanovsky, CBO & co-founder, Ermetic, and Travis McPeak, head of product security, Databricks. We'll have fun conversation and games, plus at the end of the hour (11 AM PT/2 PM ET) we'll do our Icebreaker (AKA "cybersecurity speed dating").

Thanks to our video chat sponsor, Ermetic

Thanks to our video chat sponsor, Ermetic

Defense in Depth

What’s the Value of Certifications?

Defense in Depth What’s the Value of Certifications?

On this week's Defense in Depth, guest co-host Will Gregorian, head of IT and security, Rhino, and I welcome guest guest Shawn M. Bowen (@smbowen), CISO, World Fuel Services. Here are a few of the highlights of our discussion:

  • Are certifications like the CISSP necessary?

  • Even if they are necessary to get hired, are they relevant?

  • Let's say something good about certs.

  • Who benefits most from certs? The candidate or the hiring manager?

.

Thanks to our podcast sponsor, Palo Alto Networks

Thanks to our sponsor, Palo Alto Networks

Overheard on Defense in Depth 

“If you're at a good company, no one's going to throw a junior person in and give them root access and just say, good luck. So there should be some guard rails, some training, some investment of time and money. You can't just wish them good luck and come back to them after a week and hope they haven't broken anything” - Brian Zimmer, head of security, Humu

Listen to full episode of "

."

Defense in Depth - Live from BlackHat 2021

Reinventing Asset Inventory for Security

Live from BlackHat 2021 - Reinventing Asset Inventory for Security

At the top of the CIS Top 20 is "know your hardware, know your software, and know your data." We’ve heard the line many times before: “You can’t protect what you don’t know you have.”I'm hosting a sponsored session all about knowing your assets, TODAY, Thursday August 5th, 2021, virtually at Black Hat 2021 from 11:20 AM to 11:40 AM PT. Joining me will be Qualys executives Ben Carr, CISO and Ed Rossi, vp product management. We will discuss the importance of security context for IT assets, which teams benefit from the information, and how to effectively implement a cybersecurity asset management practice.Join us!

This Black Hat session is sponsored by Qualys

This Black Hat session is sponsored by Qualys

 Cyber Security Headlines - Week in Review 

NEW! DATE CHANGE!

We’re live tomorrow – and every Friday – at 12:30pm PT/3:30 pm ET for a short 20-minute discussion of the week's cyber news. Here are a few of the stories we'll be discussing on the show:

  • NSO spyware found on French journalists' phones

  • Federal agencies are failing to protect sensitive data, Senate report finds

  • Microsoft unveils proof of vaccination requirements for entering a Microsoft building in the US

You can participate live in the conversation by

or subscribe to the daily newsletter.

Thanks to this week's headlines sponsor, PlexTrac

Thanks to this week's headlines sponsor, PlexTrac

Overheard on CISO/Security Vendor Relationship Podcast 

“My big configuration management challenge was having our cloud security program involved in the strategies and also the migration plans, because we actually wanted to build security in through the development process, so we didn't want the move from the on-prem solution into the cloud to occur first and then InfoSec being an afterthought” - Jonathan Keith, CISO, Viacom/CBS Streaming

Listen to full episode of "

"