i
ITSPmagazine Blog — By Sean and Marco
44 articles matching · page 1 of 2
It Fractured, Then Rebuilt Itself: The CISO Role Changed More in Five Years Than Ever Before, Setting the Stage for 2026 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
The CISO role has shifted from technical defense to business risk leadership, demanding judgment, communication, and trust as core capabilities. This conversation explores how security leaders redefine success by focusing on prioritization, human decision-making, and business alignment.
When AI Guesses and Security Pays: Choosing the Right Model for the Right Security Decision | A Brand Story Highlight Conversation with Michael Roytman, CTO of Empirical Security
Security teams are overusing general purpose AI models for decisions they were never designed to make. This conversation explains why predictive security requires purpose built models, continuous retraining, and disciplined data science.
Inside the Economics That Shape Modern Cybersecurity Innovations: How the Cybersecurity Startup Engine Really Works | A Conversation with Investor and Author, Ross Haleliuk | Redefining CyberSecurity with Sean Martin
This episode explores how cybersecurity startups form, why the market produces so many tools, and how security buyers should evaluate both emerging and established vendors. Sean Martin and Ross Haleliuk break down the forces shaping today’s innovation engine and the business realities behind modern security solutions.
Beg Bounty: The New Wave of Unrequested Bug Claims and What They Mean | A Conversation with Casey Ellis | Redefining CyberSecurity with Sean Martin
This episode breaks down the rise of “beg bounties” and examines how unsolicited vulnerability claims create confusion, noise, and operational overhead for security teams. Sean Martin and Casey Ellis discuss what organizations can do to prepare, respond, and set clear expectations through structured disclosure policies
Bridging the Cybersecurity Divide Between the Haves and Have-Nots: Lessons from Australia’s CISO Community | A Conversation with Andrew Morgan | Redefining CyberSecurity with Sean Martin
Andrew Morgan joins Sean Martin to unpack the widening cybersecurity gap between large enterprises and resource-strapped organizations. He shares how collaboration, cultural alignment, and practical resilience strategies can help close that divide.
How to Stay Resilient When Cybercrime Becomes Your Competition | A Conversation with Author and Former FBI Agent, Eric O'Niell | Redefining CyberSecurity with Sean Martin
Cybercrime has become a full-scale global economy, forcing legitimate businesses to compete with criminals for survival. Former FBI operative and NeXasure National Security Strategist Eric O’Neill joins Sean Martin to explain how preparation, clear strategy, and strong communication can keep companies resilient when—no
The Hidden Cost of Too Many Cybersecurity Tools (Most CISOs Get This Wrong) | A Conversation with Pieter VanIperen | Redefining CyberSecurity with Sean Martin
Pieter VanIperen, Chief Information Security and Technology Officer at AlphaSense, shares what it really means to simplify security by focusing on context, value, and relevance—not volume or complexity. This conversation challenges the assumptions vendors make and offers real-world principles that security leaders can
SBOMs in Application Security: From Compliance Trophy to Real Risk Reduction | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 3 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
SBOMs promised to be the ingredient label for software, accelerating response and boosting trust. But adoption lags: less than 1% of GitHub repos use them, only 15% of developer questions get resolved, and fewer than half of EU firms fund supply chain programs. In this episode, Sean Martin breaks down the contradiction
The Problem With Threat Modeling in Application Security: Too Slow, Too Theoretical, Not Agile | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 2 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Threat modeling is praised as the cornerstone of secure software design, yet only one-third of organizations have a documented process and fewer than four in ten use it systematically at scale. Sean Martin unpacks why adoption is so low—and why evolving processes, not just models, is the key to making it work.
How Novel Is Novelty? Security Leaders Try To Cut Through the Cybersecurity Vendor Echo Chamber | Reflections from Black Hat USA 2025 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE3 | Read by TAPE3
Black Hat USA 2025 brought countless vendor announcements — but how many will actually change the way security programs run? In this episode, Sean Martin explores several vendor press releases and recalls several conversations with CISOs to break down the real trends, the AI hype, and what both CISOs and vendors need t
When Automation Meets Ethics, Budget, Data, and Risk: The Real Factors Behind AI Deployment | An Infosecurity Europe 2025 Conversation with Andrea Isoni | On Location Coverage with Sean Martin and Marco Ciappelli
Andrea Isoni shares how AI moves from research into real-world application, navigating practical choices around data, budget, and scalability to solve business and societal problems. From automating car accident rulings to forecasting where AI misuse might emerge, this episode explores what’s truly happening behind the
From Dashboards to Decisions: Why Your Security Metrics Might Be Leading You Astray | An OWASP AppSec Global 2025 Conversation with Aram Hovsepyan | On Location Coverage with Sean Martin and Marco Ciappelli
Aram Hovsepyan challenges the security industry’s overreliance on tool-generated vulnerability metrics and advocates for a goal-driven approach grounded in risk and business context. In this episode, he shares how organizations can shift from reactive dashboards to purposeful measurement strategies that truly support s
Turning AppSec into a Workflow, Not a Roadblock – Building Security Programs That Teams Actually Want to Use | An OWASP AppSec Global 2025 Conversation with Spyros Gasteratos | On Location Coverage with Sean Martin and Marco Ciappelli
What if your AppSec program could be both deeply technical and deeply human? In this On Location episode from OWASP Global AppSec EU 2025 Conference, Spyros Gasteratos shares how automation, open-source tools, and community collaboration can unify fragmented efforts and turn security into a strategic advantage, not a b
When Guardrails Aren’t Enough: How to Handle AI’s Hidden Vulnerabilities | An Infosecurity Europe 2025 Pre-Event Conversation with Peter Garraghan | On Location Coverage with Sean Martin and Marco Ciappelli
AI isn’t magic—it’s still software, and with that comes familiar risks that too often get overlooked in the hype. In this episode, Professor Peter Garraghan breaks down how traditional security thinking still applies, and why understanding the nuances of AI systems is essential to keeping them secure.
Why We Can’t Completely Trust the Intern (Even If It’s AI) | An RSAC Conference 2025 Conversation with Alex Kreilein and John Sapp Jr. | On Location Coverage with Sean Martin and Marco Ciappelli
What happens when AI writes your code—but you’re not sure you can trust it? In this episode, Sean Martin sits down with Alex Kreilein and John Sapp Jr. to unpack how zero trust thinking, threat modeling, and quality management are essential to building resilient, secure systems in an AI-driven world.
The Hidden Cost of Closing the Door on Innovation | An RSAC Conference 2025 Conversation with Phillip Miller | On Location Coverage with Sean Martin and Marco Ciappelli
Phillip Miller, CISO and founder of Qurple, shares how stepping outside the enterprise helped him reconnect with what security teams and startups really need—and why that perspective is critical for making better cybersecurity decisions. This episode explores how CISOs can better engage their teams, understand the busi
Security at a Crossroads: Innovation, Risk, and the Relationship Between the CISO and the Vendor Community | An RSAC Conference 2025 Conversation | On Location Coverage with Sean Martin and Marco Ciappelli
This episode captures a candid reflection on how the cybersecurity community—particularly CISOs—are navigating risk, innovation, and decision-making in an environment saturated with noise and pressure. Sean Martin and Marco Ciappelli explore why true progress may require shifting who gets to evaluate new ideas and how
Vibe Coding: Creativity Meets Risk in the Age of AI-Driven Development | A Conversation with Izar Tarandach | Redefining CyberSecurity with Sean Martin
Vibe coding sounds fast and effortless—but what happens when AI-generated code bypasses security checks and leaves teams with invisible risk? In this episode, Sean Martin and Izar Tarandach unpack the tension between innovation and responsibility, challenging security leaders and developers to rethink how they build an
Building and Securing Intelligent Workflows: Why Your AI Strategy Needs Agentic AI Threat Modeling and a Zero Trust Mindset | A Conversation with Ken Huang | Redefining CyberSecurity with Sean Martin
Ken Huang, Co-Chair of the Cloud Security Alliance AI Working Group, explains how agentic AI is transforming enterprise workflows, redefining cybersecurity, and demanding a new approach to governance and risk. This episode breaks down what leaders across development, IT, and security need to know now to responsibly ado
Rebalancing Cyber Security: Prioritizing Response and Recovery in Governance | An Australian Cyber Conference 2024 in Melbourne Conversation with Asaf Dori and Ashwin Pal | On Location Coverage with Sean Martin and Marco Ciappelli
Discover how Asaf Dori and Ashwin Pal unravel the often-overlooked gaps in cybersecurity response and recovery, sharing practical strategies to bridge the divide between IT and business needs. Learn how aligning recovery plans with operational goals can transform cybersecurity from a cost center into a competitive adva
Building Resilience in a Disruptive Digital Landscape while Being Green by Design: Addressing the Carbon Footprint in Cybersecurity | An Australian Cyber Conference 2024 in Melbourne Conversation with Sian John | On Location Coverage
In this engaging On Location episode from AISA Cyber Conference 2024, Sean Martin and Sian John MBE explore crucial topics such as the carbon impact of AI, the importance of OT security, and the intersection of cost, regulation, and sustainability in today’s business strategies. Their insightful discussion offers a for
When Risk Management and Information Security Resonate with Hearts and Minds | A Conversation with Nadine Michaelides and Julie Haney | Redefining CyberSecurity with Sean Martin
Explore how Nadine Michaelides, a security and crime psychologist, redefines the role of employees in cybersecurity by focusing on intrinsic motivation and human risk management. Joined by hosts Julie Haney and Sean Martin, this episode delves into creating a culture where the human element strengthens, rather than wea
Leveraging Data for Cyber Insurance to Bring Consistency and Clarity in Underwriting | 7 Minutes on ITSPmagazine From HITRUST Collaborate 2024 | A Trium Cyber Short Brand Innovation Story with Josh LaDeau
Discover how Trium Cyber, in collaboration with HITRUST, is revolutionizing cyber insurance through data integrity and structured frameworks. Join Sean Martin and Josh LaDeau as they explore the challenges and innovative solutions transforming the industry.
Building Resilient Software: Secure by Design, Transparency, and Governance Remain Key Elements | A Conversation with Chris Hughes | Redefining CyberSecurity with Sean Martin
In this episode of The Redefining CyberSecurity Podcast, Sean Martin engages with cybersecurity consultant and author Chris Hughes to explore the complexities of software supply chain security and vulnerability management. Together, they discuss practical strategies for achieving transparency in software components and