April 3, 2017 By Mitch Mayne 3 min read

I have a confession: Talking about technology can bore the heck out of me. Bot master, data encryption, system-specific policies — there are times when hearing someone ramble on about this stuff makes my eyes roll into the back of my head. One minute I’m listening intently and the next I’m picturing a guy straight out of the Dilbert comic series sporting bottle-thick glasses, a short-sleeve button-up shirt and a tie with a pizza stain from last week’s office party.

That’s why it’s really refreshing to read books, such as “Take Back Control of Your Cybersecurity Now,” written by smart, technology-savvy people who can speak passionately about cybersecurity without dragging the rest of us into the mind-numbing quicksand of IT jargon. Don’t get me wrong — it’s important to be informed and understand the terminology, but it’s equally important to present that information in a way that people can actually comprehend.

Meet the Experts

Enter authors Paul Ferrillo and Chris Veltsos. I’ll come clean here and admit these guys are at least part nerd, but they also have their wits about them and can talk about their expertise in cybersecurity with an ease virtually anyone can understand — even me.

Paul is a lawyer at New York’s Weil, Gotshal & Manges law firm focusing on cybersecurity governance issues. In the book, he adroitly guides us through the deeply complex legal and policy landscape surrounding security. Chris is a professor in the Department of Computer Information Science at Minnesota State University. He is also known as Dr. InfoSec online — partly a hat tip to his advanced degrees, but maybe more of a recognition of his ability to be smart about cybersecurity without making the rest of us feel dumb.

Pick Your Podcast

So, when I got the opportunity to interview these two gents in a podcast series based on their book, I jumped at the chance. When I stepped into this task, I had no idea that it would turn into a series of nine podcasts. The more I got into it, the more I enjoyed it and the smarter I got, which is a no small feat for a communications guy like me. And don’t worry — we’ve kept the podcasts short and digestible for you.

Before writing this article, I went back to Chris and Paul to ask them what their favorite sessions were, which is kind of like asking a restaurant’s head chef what her favorite dish is on the menu. So if you’re a pick-and-choose person such as myself, this might serve as a good cheat sheet to help you decide what to listen to first.

In Paul’s favorite sessions, we discussed:

  • Artificial intelligence, cognitive computing and what they mean for the future of cybersecurity;
  • Why employing guidelines from the National Institute of Standards and Technology (NIST) is a must; and
  • The need for both chief information security officers (CISOs) and boards to ask tough questions in a language the other can understand.

Chris’ favorite sessions included conversations about:

Paul and Chris may be the experts, but I have to call out my personal favorite episode as well. In that session, we discussed what makes IBM Watson different from the vast range of other security solutions.

Learn How to Take Back Control of Your Cybersecurity

Well, what are you waiting for? Check out the podcasts and spend a few minutes learning from smart guys who won’t make you feel stupid.

While you’re at it, don’t forget to read Paul and Chris’ complete book to get the whole story. Finally, keep an eye out here on Security Intelligence for updates from Paul, Chris and me. We’ve agreed to get the band back together about once a month to cover new cybersecurity issues as they come up.

Listen to the podcast series: Take Back Control of Your Cybersecurity now

More from CISO

Empowering cybersecurity leadership: Strategies for effective Board engagement

4 min read - With the increased regulation surrounding cyberattacks, more and more executives are seeing these attacks for what they are - serious threats to business operations, profitability and business survivability. But what about the Board of Directors? Are they getting all the information they need? Are they aware of your organization’s cybersecurity initiatives? Do they understand why those initiatives matter? Maybe not. According to Harvard Business Review, only 47% of board members regularly engage with their CISO. There appears to be a…

The evolution of 20 years of cybersecurity awareness

3 min read - Since 2004, the White House and Congress have designated October National Cybersecurity Awareness Month. This year marks the 20th anniversary of this effort to raise awareness about the importance of cybersecurity and online safety. How have cybersecurity and malware evolved over the last two decades? What types of threat management tools surfaced and when? The Cybersecurity Awareness Month themes over the years give us a clue. 2004 - 2009: Inaugural year and beyond This early period emphasized general cybersecurity hygiene,…

C-suite weighs in on generative AI and security

3 min read - Generative AI (GenAI) is poised to deliver significant benefits to enterprises and their ability to readily respond to and effectively defend against cyber threats. But AI that is not itself secured may introduce a whole new set of threats to businesses. Today IBM’s Institute for Business Value published “The CEO's guide to generative AI: Cybersecurity," part of a larger series providing guidance for senior leaders planning to adopt generative AI models and tools. The materials highlight key considerations for CEOs…

Bringing threat intelligence and adversary insights to the forefront: X-Force Research Hub

3 min read - Today defenders are dealing with both a threat landscape that’s constantly changing and attacks that have stood the test of time. Innovation and best practices co-exist in the criminal world, and one mustn’t distract us from the other. IBM X-Force is continuously observing new attack vectors and novel malware in the wild, as adversaries seek to evade detection innovations. But we also know that tried and true tactics — from phishing and exploiting known vulnerabilities to using compromised credentials and…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today