Breaches & Brews

The Rivial Data Security team discusses all things cybersecurity while enjoying their favorite brews. We keep it fun and laidback with special guests, personal stories, and some great advice for anyone managing a cybersecurity program.

Breaches & Brews is a business podcast hosted by Rivial Data Security, with 33 episodes on record and a Required Pod Score of 80.

Rivial Data Security hosts Breaches & Brews, a business show with 33 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Breaches & Brews

  AI & Third-Party Risk: What To Ask Your Vendors Today

  Sep 3, 202650 min

  Your vendors are adding AI faster than your risk reviews can keep up. Once a vendor adds AI, the model behind their product can change between your reviews, and a once-a-year questionnaire won't catch it. Join Randy Lindberg, Aaron Kirkpatrick, and Lucas Hathaway for a practical look at how lean teams can spot, assess, and monitor vendor AI risk without adding headcount or building a program you don't have time to run. Key takeaways: - The new risk categories AI brings to a vendor relationship - The specific questions to add to your vendor questionnaire - A simple way to tier vendors by AI risk - How to fold light continuous monitoring into the vendor process - How to translate vendor AI risk into dollar figures for your board and examiners On-Demand Webinar.

  ListenShow Notes
• 

  Breaches & Brews

  The State of Credit Union Cybersecurity: What The NCU-ISAO Is Hearing

  Aug 5, 202654 min

  Rivial Data Security sits down with Brian Hinze, MBA, President & CEO and Founder of the National Credit Union ISAO (NCU-ISAO), for a candid conversation on what he's hearing from credit union leaders and security practitioners across the country. Whether you're a CISO managing day-to-day risk or a CEO making strategic investment decisions, Brian breaks down what's changed in 2026 — from NCUA exam expectations to AI-driven threats — and where credit unions should be focusing their energy now. Key Takeaways: - What Brian is hearing from the community right now about cybersecurity - What are the NCUA supervisory priorities for 2026 - Where AI is creating both opportunity and exposure for credit unions and their members - What credit unions should prioritize now to build cyber resilience into 2027 and beyond On-Demand Webinar

  ListenShow Notes
• 

  Breaches & Brews

  The vCISO Buyer's Guide for Credit Unions, Banks and Other Highly Regulated Organizations

  Jun 29, 202650 min

  The word vCISO gets slapped on almost everything, which makes it hard to tell a strategic security leader from someone who will just run tools. In this episode, Randy Lindberg (CEO of Rivial Security) and John Moeller (co-founder of CyberAssurance) walk through how to choose the right virtual CISO for a credit union, community bank, or other regulated institution. They cover the signals that say you need a vCISO instead of an MSSP, what should and should not be in scope, why read-only access and independence matter, how much industry and exam experience counts, the red flags in a sales pitch, how to budget based on risk in dollars, and how to know within 90 days whether it is working. A clear, practical session for lean security teams under exam pressure. Start with a free cyber risk assessment of five critical systems, no sales call required: https://rivialsecurity.com/free-cyber-risk-assessment

  ListenShow Notes
• 

  Breaches & Brews

  Building AI Governance from Scratch: NIST AI RMF, Shadow AI, and Board Reporting

  May 28, 202652 minS0

  <p>78% of organizations now use AI in at least one business function, but most haven't gone beyond putting a basic AI policy in place. In this workshop, Rivial Data Security founder Randy Lindberg and senior consultant Molly Ford walk through a practical approach to AI governance using the NIST AI Risk Management Framework. Topics include why AI risk belongs inside your existing cyber risk program instead of a separate silo, the eight elements you need to properly measure AI risk, how to catalog AI systems when tools like Copilot and Gemini are already embedded in your environment, how to combat...

  ListenShow Notes
• 

  Breaches & Brews

  Two NCUA Cybersecurity Examiners Tell Us What They're Looking For in 2026

  May 13, 202653 minS0

  <p>We sat down with two NCUA Regional Information Security Officers to ask them point blank: what are you finding in exams, what do you want credit unions to fix, and what does "good" actually look like?</p><p>Charles has been with the NCUA for 27 years. Murray left the agency, worked at a credit union, and came back. Between them, they've examined institutions from $50 million to $13 billion in assets. They don't hold back.</p><p>In this episode, they walk through the most common deficiencies from 2025 exams (access controls, MFA gaps, vendor incident response), explain why expressing cyber risk...

  ListenShow Notes

Recent guests on Breaches & Brews. Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.