i
ITSPmagazine Blog — By Sean and Marco
83 articles matching · page 2 of 4
Beyond the Hoodie: Redefining Who Belongs in Cybersecurity with Community as the Missing Link in Cyber Resilience | An Infosecurity Europe 2025 Conversation with Amanda Finch | On Location Coverage with Sean Martin and Marco Ciappelli
Amanda Finch, Chief Executive Officer of the Chartered Institute of Information Security, shares how formalizing the cybersecurity profession and strengthening community support can address long-standing gaps in diversity, skills development, and small business protection. Her perspective blends career-spanning insight
The Digital Dark Alley: Teaching Cybersecurity Like Fire Safety by Building Cyber Habits That Stick | An Infosecurity Europe 2025 Conversation with Jemma Davis | On Location Coverage with Sean Martin and Marco Ciappelli
What if your cybersecurity program started with your Nan—and ended with a generational shift in digital safety? In this episode, Jemma Davis shares why cultural transformation is the missing link in cybersecurity and how we can fix it through behavior, education, and story-driven awareness.
Stay Calm, But Be Ready: What Trust Looks Like in the Middle of a Breach | An Infosecurity Europe 2025 Conversation with Steve Wright | On Location Coverage with Sean Martin and Marco Ciappelli
What does real crisis management look like beyond the headlines? Steve Wright brings 30 years of cybersecurity and privacy leadership to the mic, exploring how preparation, containment, communication, and culture shape today’s response to digital disruption.
Collaboration Isn’t Fluffy: It’s Fundamental to Cybersecurity—Rethinking the Role of Humans in Cyber Defense | An Infosecurity Europe 2025 Conversation with Purvi Kay and Rob Black | On Location Coverage with Sean Martin and Marco Ciappelli
Cybersecurity leaders Purvi Kay and Rob Black explore why technical controls alone aren’t enough—and how communication, empathy, and collaboration across diverse teams are critical to mission success. From defense projects to boardroom decisions, they show how human connection drives security forward.
The Billion-Dollar Blueprint: Following the Digital Trail of Criminal Cash and the Human Cost of Cybercrime | An Infosecurity Europe 2025 Conversation with Geoff White | On Location Coverage with Sean Martin and Marco Ciappelli
Investigative journalist Geoff White unpacks the true scale and structure of cybercrime, from lightning-fast billion-dollar crypto heists to the intricate global networks used to launder stolen funds. This episode reveals the hidden human toll behind ransomware attacks and explains why understanding these stories is ke
When Automation Meets Ethics, Budget, Data, and Risk: The Real Factors Behind AI Deployment | An Infosecurity Europe 2025 Conversation with Andrea Isoni | On Location Coverage with Sean Martin and Marco Ciappelli
Andrea Isoni shares how AI moves from research into real-world application, navigating practical choices around data, budget, and scalability to solve business and societal problems. From automating car accident rulings to forecasting where AI misuse might emerge, this episode explores what’s truly happening behind the
More Than Code: Why Human Skills Matter in AppSec | An OWASP AppSec Global 2025 Conversation with Maria Mora | On Location Coverage with Sean Martin and Marco Ciappelli
Maria Mora, Staff Application Security Engineer and OWASP events committee member, shares how contributing to the community has shaped her career and expanded both her technical and human skills. From first-time attendees to seasoned volunteers, this conversation highlights the power of showing up, getting involved, an
From Fraud to Fixes: Designing Usable Security for Financial Applications | An OWASP AppSec Global 2025 Conversation with Wojciech Dworakowski | On Location Coverage with Sean Martin and Marco Ciappelli
Wojciech Dworakowski breaks down the hidden risks in mobile-only banking, where convenience often compromises transaction security. From real-world attack methods to practical solutions, this episode challenges FinTech leaders to rethink how they protect users in a smartphone-driven world.
From Dashboards to Decisions: Why Your Security Metrics Might Be Leading You Astray | An OWASP AppSec Global 2025 Conversation with Aram Hovsepyan | On Location Coverage with Sean Martin and Marco Ciappelli
Aram Hovsepyan challenges the security industry’s overreliance on tool-generated vulnerability metrics and advocates for a goal-driven approach grounded in risk and business context. In this episode, he shares how organizations can shift from reactive dashboards to purposeful measurement strategies that truly support s
Holding the Line on Quality in an AI-Driven SDLC | An OWASP AppSec Global 2025 Conversation with Sarah-Jane Madden | On Location Coverage with Sean Martin and Marco Ciappelli
Sarah-Jane Madden shares a practical and passionate take on how AI can enhance—not replace—secure software development, urging developers and business leaders alike to rethink how they balance speed, quality, and security. From architecture to code to culture, she challenges us to embrace change without leaving critica
Why Global Community-Led Innovation Is Driving Real Application Security Progress | An OWASP AppSec Global 2025 Conversation with Starr Brown | On Location Coverage with Sean Martin and Marco Ciappelli
Starr Brown, Director of Open Source Projects and Programs at OWASP, shares how the organization’s global community is powering over 130 open source initiatives aimed at eliminating insecure software. From AI-focused security projects to interactive tools and policy-shaping efforts, this conversation reveals the scale
Turning AppSec into a Workflow, Not a Roadblock – Building Security Programs That Teams Actually Want to Use | An OWASP AppSec Global 2025 Conversation with Spyros Gasteratos | On Location Coverage with Sean Martin and Marco Ciappelli
What if your AppSec program could be both deeply technical and deeply human? In this On Location episode from OWASP Global AppSec EU 2025 Conference, Spyros Gasteratos shares how automation, open-source tools, and community collaboration can unify fragmented efforts and turn security into a strategic advantage, not a b
The API That Could Transform Software Transparency | An OWASP AppSec Global 2025 Conversation with Olle E Johansson | On Location Coverage with Sean Martin and Marco Ciappelli
Olle E Johansson shares how Europe’s Cyber Resilience Act is transforming the software industry by making manufacturers responsible for the security of their products—and how automation through the Transparency Exchange API can help meet that demand. Learn how this OWASP-backed project is reshaping supply chain transpa
Redefining What Secure Application Development Looks Like: Bringing Application Security into Focus with ASVS v5 | An OWASP AppSec Global 2025 Conversation with Josh Grossman | On Location Coverage with Sean Martin and Marco Ciappelli
Josh Grossman, co-leader of the OWASP ASVS project, shares how version 5 makes secure application development more accessible, actionable, and aligned with real-world engineering workflows. If you’re building or managing software security programs, this episode offers practical insight into how ASVS can become your fou
Outside the Ivory Tower: Connecting Practice and Science — Why Human-Centered Cybersecurity Needs Both | OWASP AppSec Global 2025 Pre-Event Keynote Conversation with Kate Labunets | On Location Coverage with Sean Martin and Marco Ciappelli
In this On Location episode, Kate Labunets explores how bridging the gap between cybersecurity research and real-world practice can lead to more effective, human-centered security solutions. In this conversation, she shares how understanding employee behavior—like shadow IT use—can inform better policies, communication
Celebrating 30 Years of Connection, Innovation, and Community at Infosecurity Europe in London | Our Traditional Pre-Event Kick-Off Conversation with Saima Poorghobad | On Location Coverage with Sean Martin and Marco Ciappelli
As Infosecurity Europe celebrates its 30th anniversary, Portfolio Director Saima Poorghobad shares how the event has grown into a vital hub for innovation, policy collaboration, and community building across the cybersecurity ecosystem. From quantum computing and geopolitics to student engagement and AI-focused program
When Guardrails Aren’t Enough: How to Handle AI’s Hidden Vulnerabilities | An Infosecurity Europe 2025 Pre-Event Conversation with Peter Garraghan | On Location Coverage with Sean Martin and Marco Ciappelli
AI isn’t magic—it’s still software, and with that comes familiar risks that too often get overlooked in the hype. In this episode, Professor Peter Garraghan breaks down how traditional security thinking still applies, and why understanding the nuances of AI systems is essential to keeping them secure.
From Isolation to Collaboration: Rethinking Cyber Resilience for the Real World of Small and Medium Enterprise | Infosecurity Europe 2025 Pre-Event Conversation with Steven Furnell | On Location Coverage with Sean Martin and Marco Ciappelli
Small businesses are often left to navigate cybersecurity alone—but what if they didn’t have to? In this episode, Professor Steven Furnell shares how building local communities of support can empower SMEs to better understand, manage, and collaborate on cybersecurity without needing to be experts themselves.
Building, Breaking, Defending: Inside a Global AppSec Movement | OWASP AppSec Global 2025 Pre-Event Conversation with Avi Douglen | On Location Coverage with Sean Martin and Marco Ciappelli
This On Location episode offers a firsthand look at what makes a tight-knit application security community so impactful, especially when the conversations go beyond tools and tactics to focus on real collaboration and growth. From AI risks to culture shifts, you’ll hear what to expect at this year’s global gathering an
Why We Can’t Completely Trust the Intern (Even If It’s AI) | An RSAC Conference 2025 Conversation with Alex Kreilein and John Sapp Jr. | On Location Coverage with Sean Martin and Marco Ciappelli
What happens when AI writes your code—but you’re not sure you can trust it? In this episode, Sean Martin sits down with Alex Kreilein and John Sapp Jr. to unpack how zero trust thinking, threat modeling, and quality management are essential to building resilient, secure systems in an AI-driven world.
The Hidden Cost of Closing the Door on Innovation | An RSAC Conference 2025 Conversation with Phillip Miller | On Location Coverage with Sean Martin and Marco Ciappelli
Phillip Miller, CISO and founder of Qurple, shares how stepping outside the enterprise helped him reconnect with what security teams and startups really need—and why that perspective is critical for making better cybersecurity decisions. This episode explores how CISOs can better engage their teams, understand the busi
RSAC 2025 Coverage is done! It's a wrap, we are good to go, but The Musings Are Just Getting Started | An RSAC Conference 2025 Conversation | On Location Coverage with Sean Martin and Marco Ciappelli
RSAC 2025 is a wrap. The expo floor is closed, the conversations have ended, and the gear is packed — but the reflections are just beginning. Throughout the week, Sean Martin and Marco Ciappelli had powerful discussions around AI, identity, platform security, partnerships, the evolving legal and VC landscapes, and the
Mindset Matters: Rethinking How We Teach and Design Cybersecurity | An RSAC Conference 2025 Conversation with Jason R.C. Nurse | On Location Coverage with Sean Martin and Marco Ciappelli
Dr. Jason R.C. Nurse explores how our attitudes toward cybersecurity—shaped by personal experience, workplace culture, and even convenience—directly influence our day-to-day behaviors. This episode uncovers why making security feel approachable, not intimidating, may be the key to building a safer digital world.
Resilience Is the Destination, Innovation Is the Path | An RSAC Conference 2025 Conversation | On Location Coverage with Sean Martin and Marco Ciappelli
Sean Martin and Marco Ciappelli walk the buzzing RSAC 2025 show floor to reflect on the real conversations shaping cybersecurity today—from quantum resilience and AI integration to the steady rise of zero trust and DevSecOps. With dozens of interviews recorded and more content on the way, this episode gives a quick but