i
ITSPmagazine Blog — By Sean and Marco
227 articles matching · page 1 of 10
Using AI to Cut GRC Busywork Without Cutting Out the Human | A Redefining CyberSecurity Podcast Conversation with Princess Okoro, Manager, Security Governance, Risk and Compliance of Trainline
Princess Okoro, Manager, Security Governance, Risk and Compliance at Trainline, makes the case that adding AI to a broken process only makes the process worse. She shows how her team uses a ChatGPT policy review agent as a first pass with a human checking every finding, and why AI governance is the next problem to…
Compliance Moves at the Speed of DevOps When Paperwork Writes Itself | A Brand Briefing at Black Hat USA 2026 with Travis Howerton, Co-Founder and CEO at RegScale | Hosted by Sean Martin
The first CTO of the US Nuclear Weapons Program left government convinced that the checklist approach to audits was holding the whole industry back. At Black Hat USA 2026 he explains how compliance as code turns an 18-month authority to operate into something closer to 30 days, with a better risk posture on the other s
Cybersecurity Leadership Is a People Problem, Not a Technology Problem | A Redefining CyberSecurity Podcast Conversation with Tera Ladner, Deputy Global Chief Information Security Officer of Aflac
A deputy global CISO who came up through information governance and law school makes the case that the strongest security leaders lead with risk, relationships, and storytelling, not with technology. It is a conversation about non-traditional paths into cyber, building people-centric teams, and why the talent pipeline
Adapting to the Speed of Risk: Why GRC Programs Must Move with the Business | A Brand Highlight Conversation with Steve Schlarman, Senior Director of Archer
Traditional GRC cycles were never designed to keep pace with the speed of modern business, and that gap is quietly creating risk exposure across organizations everywhere. Steve Schlarman of Archer shares how the Archer Evolv platform is reshaping governance, risk, and compliance into a continuous, adaptive program that
Speaking Security with a Business Accent: Why Being Right Isn't Enough If Nobody Listens | A Redefining CyberSecurity Podcast Conversation with Josh Mason
Cybersecurity professionals are often technically right but strategically ignored, and the gap between security knowledge and business impact comes down to how the story is told. In this conversation, Josh Mason draws on his Air Force background, MBA training, and new book to explore how security teams can reframe thei
Building a Real Security Culture: Why Most AppSec Champion Programs Fall Short | AppSec Contradictions: 7 Truths We Keep Ignoring — Episode 5 | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Security champions were meant to bridge dev and AppSec—but most programs measure attendance, not outcomes. In this episode of AppSec Contradictions, Sean Martin explains why awareness isn’t culture, what research shows about champion success, and how to rebuild AppSec programs that actually reduce risk.
Beyond the Title: What It Really Takes to Be a CISO Today — Insights Following A Conversation with Solarwinds CISO, Tim Brown | A Musing On the Future of Cybersecurity with Sean Martin and TAPE9 | Read by TAPE9
Being a strong CISO requires more than technical expertise — it takes context, perspective, and trusted relationships built long before a crisis hits. This article explores what current and aspiring security leaders can do to prepare for the role in a way that truly supports the business.
The Cyber Resilience Act: How the EU is Reshaping Digital Product Security | A Conversation with Sarah Fluchs | Redefining CyberSecurity with Sean Martin
The Cyber Resilience Act (CRA) is set to transform cybersecurity accountability by requiring manufacturers—not just users—to ensure the security of digital products, from smart devices to industrial control systems. In this episode, Sean Martin speaks with Sarah Fluchs about what the CRA means for businesses, the chall
Cyber Wars: How Elite Teams Stay Ahead of the Game | A Conversation with Gary Hayslip | The Soulful CXO Podcast with Dr. Rebecca Wynn
In this episode, we dive into the high-stakes world of cybersecurity with Gary Hayslip, CISO of SoftBank Investment Advisors. With over 25 years of experience, Gary shares how elite security teams anticipate threats, adapt to evolving risks, and implement strategies to stay ahead. Discover key insights on leadership, r
AI, Cybersecurity, and the High-Stakes Risks in Healthcare | A HIMSS 2025 Conversation with Lee Kim | On Location Coverage with Sean Martin and Marco Ciappelli
AI is transforming healthcare, but without proper oversight, it introduces serious risks to patient safety, data security, and operational resilience. In this episode, Lee Kim, Senior Principal of Cybersecurity and Privacy at HIMSS, joins Sean Martin and Marco Ciappelli to discuss the urgent need for governance, proact
Zero Trust in Action: Revolutionizing Incident Response | A Zero Trust World Conversation with Art Ocain | On Location Coverage with Sean Martin and Marco Ciappelli
In this episode, Art Ocain, VP of Cybersecurity & Incident Response at Airiam, shares practical strategies for applying zero trust principles to incident response, revealing how dynamic containment and micro-segmentation can safeguard critical systems during a breach. Listen in to learn how to align security initiative
Strengthening Cybersecurity Through Zero Trust | A Conversation with Adam Fuller at Zero Trust World 2025 | A Zero Trust World 2025 On Location Coverage with Sean Martin and Marco Ciappelli
Zero Trust World 2025: Strengthening Cybersecurity Through Zero Trust Zero Trust World 2025 has come to a close, leaving behind a series of thought-provoking discussions on what it truly means to build a culture of security. Hosted by ThreatLocker, the event brought together security professionals, IT leaders, and dec
Building a Community and a Culture of Security Education and Operations | A Zero Trust World Pre-Event Kick-Off | On Location Coverage with Sean Martin and Marco Ciappelli
Zero Trust World 2025 kicks off with a deep dive into what Zero Trust really means—beyond the buzzword—focusing on security operations, AI’s growing role, and the necessity of a continuous verification mindset. Hosts Sean Martin and Marco Ciappelli bring you inside the event, capturing insights from industry leaders, h
Shadow IT: Securing Your Organization in a World of Unapproved Apps | A Zero Trust World Conversation with Ryan Bowman | On Location Coverage with Sean Martin and Marco Ciappelli
In this episode of On Location with Sean and Marco, Ryan Bowman, VP of Solutions Engineering at ThreatLocker, breaks down the growing risks of Shadow IT—unauthorized applications and tools that create security gaps, operational inefficiencies, and compliance challenges. With real-world insights and practical strategies
Cybersecurity Leadership: Balancing Risk, Growth, and Strategy | A Conversation with Todd Fitzgerald | The Soulful CXO Podcast with Dr. Rebecca Wynn
In this episode, we explore the evolving role of cybersecurity leadership with Todd Fitzgerald, author of CISO Compass and co-author of The Privacy Leader Compass. Learn how aligning security strategies with business priorities, fostering collaboration, and embracing innovation can elevate cybersecurity programs and dr
The Ultimate 2025 Tech & Cybersecurity Event Guide: Where to Be | On Location Coverage with Sean Martin and Marco Ciappelli
ITSPmagazine’s Sean Martin and Marco Ciappelli outline their event coverage plans for 2025, highlighting major cybersecurity conferences like RSA, Black Hat, and Infosecurity Europe, along with tech, legal, and industry-specific events shaping innovation. From on-location interviews to exclusive insights, they share ho
Cyber Threat Research, Hands-On Labs, and a Challenge You Can’t Afford to Miss | A Zero Trust World Conversation with Kieran Human | On Location Coverage with Sean Martin and Marco Ciappelli
Zero Trust World 2025 is bringing IT professionals, business leaders, and security practitioners together for hands-on hacking labs, expert-led sessions, and high-profile keynotes on the future of cybersecurity. In this episode, Sean Martin and Marco Ciappelli preview the must-attend event with Kieran Human, exploring
When There’s a Wildfire, It’s Pass or Fail | A Conversation with Alister Watt | What If Instead? Podcast with Alejandro Juárez Crawford and Miriam Plavin-Masterman
A What If Instead? Conversation with Alister Watt on the science behind mitigation programs and emphasizes the need for community engagement to foster a culture of safety and resilience.
How Do We Make Decisions in Cyber Security? Operational, Tactical, and Strategic Decision-Making in the Age of AI | An Australian Cyber Conference 2024 in Melbourne Conversation with Ivano Bongiovanni | On Location Coverage
Discover how Ivano Bongiovanni, General Manager for AUSCERT and Senior Lecturer at the University of Queensland, unpacks the complexities of cybersecurity decision-making, data governance, and regulatory accountability. This episode offers actionable insights into navigating organizational challenges while leveraging c
AI in Cybersecurity: Hero or Villain? | A Conversation with Chuck Brooks | The Soulful CXO Podcast with Dr. Rebecca Wynn
In this episode, we dive into how AI is transforming cybersecurity with expert Chuck Brooks, author of Inside Cyber: How AI, 5G, IoT, and Quantum Computing Will Transform Privacy and Our Security. Discover practical strategies for enhancing threat detection, addressing talent shortages, and safeguarding both SMBs and e
A New People-Centric Approach to Determining an Organization's Exposure to a Third-Party Data Breach | A SecTor Cybersecurity Conference Toronto 2024 Conversation withChristine Dewhurst and Dr. Thomas Lee | On Location Coverage
In this episode of the On Location with Sean and Marco as part of our coverage of SecTor Information Security Conference in Toronto, Canada, Christine Dewhurst and Dr. Thomas Lee introduce a groundbreaking model that predicts an organization's exposure to third-party data breaches based on staffing levels and certifica
Transforming Compliance and Revolutionizing Cybersecurity | A HITRUST Collaborate 2024 Conversation with Ryan T. Patrick | On Location Coverage with Sean Martin
Join Sean Martin and Ryan T. Patrick as they discuss groundbreaking HITRUST initiatives like the continuous assurance model, AI security certification, and a new cyber insurance product that rewards robust cybersecurity practices. Discover how HITRUST's innovative approaches are helping organizations enhance security a
Actionable Strategies to Prevent Data Breaches | A Conversation with Sarah Armstrong-Smith | The Soulful CXO Podcast with Dr. Rebecca Wynn
As part of Cybersecurity Awareness Month, we explore actionable strategies to prevent data breaches and ensure long-term enterprise continuity. Learn from an expert how proactive incident response, disaster recovery, and understanding your security architecture are essential for protecting your organization from cyber
Strategies for Effective Cybersecurity Governance and Protection to Better Balance Innovation and Regulation in Cybersecurity | CISO Circuit Series with Mandy Huth and Whitney Merrill | Michael Piacente and Sean Martin | Redefining CyberSecurity Podcast
Join Sean Martin and Michael Piacente in this compelling episode of the Redefining CyberSecurity podcast, as they explore the complexities of cybersecurity leadership and liability with industry veterans Mandy Huth and Whitney Merrill. Discover pivotal insights on shared responsibility, regulatory expectations, and the