Cybersecurity Where You Are (video)

Welcome to video version of “Cybersecurity Where You Are,” the podcast of the Center for Internet Security® (CIS®). Cybersecurity affects us all — whether we’re online at home, managing a company, supporting clients, or running a state or local government. Join us on Wednesdays as Sean Atkinson, CISO at CIS, and Tony Sager, SVP & Chief Evangelist at CIS, discuss trends and threats, explore security best practices, and interview experts in the industry. Together, we’ll clarify these issues, creating confidence in the connected world. Subscribe to the audio version of our podcast here: https://fast.wistia.net/embed/channel/wbyhaw35xf?wchannelid=wbyhaw35xf.

Cybersecurity Where You Are (video) is a technology podcast hosted by Center for Internet Security, with 207 episodes on record and a Required Pod Score of 80.

Center for Internet Security hosts Cybersecurity Where You Are (video), a technology show with 207 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #207

  Episode 207: AI Risk Management — A Trust Relationship

  Sep 30, 202633 min

  In episode 207 of Cybersecurity Where You Are, Sean Atkinson makes the case for treating artificial intelligence (AI) not as software but as an ongoing trust relationship. He highlights the value of integrating best practices from regulations like the EU AI Act, walks through the three stages of an AI governance lifecycle, and explains how AI risk management fits into organizational governance, change management, and other business processes. Here are some highlights from our episode: 01:16 . The trust component of AI governance 02:02 . A need to align to regulatory best practices and bring them into AI risk management 03:47 . Advice: Contextualize, don't generalize, your risks associated with AI use 04:40 . Common questions that lead to AI governance as a requirement 06:59 . Grounding an agile AI governance process on foundational principles 07:46 . How the "fortress" approach overlooks the relationship element of AI security 09:51 . A direct invitation: Listener feedback on AI governance thinking 11:44 . Evaluating trust and relationship in machine learning and generative AI 14:04 . The role of human oversight in realizing AI as a method that gets to a solution quicker 14:53 . AI governance boards: A potential solution to elevating AI literacy internally 16:00 . AI governance lifecycle: Three phases from current business processes to value generation 18:55 . Overview of the future of AI security 23:16 . The need for foundational security controls and AI-specific controls 25:00 . AI governance assessment: Why it needs to happen across the organization 26:28 . How AI governance ties into organizational governance 29:49 . Ethics and responsible AI practice 29:57 . Change management considerations with AI deployment 30:35 . A concluding call to action to get stronger together Resources CIS Critical Security Controls® Episode 198: AI Privacy from a Risk-Based Perspective Episode 122: DeepSeek AI Security and Utility Considerations Episode 120: How Contextual Awareness Drives AI Governance AI Playbooks for SLTT Cybersecurity Leaders CIS Controls v8.1.2 AI Security Guidance Workbook Guide to Implementation Groups (IG): CIS Critical Security Controls v8.1 Mapping and Compliance with the CIS Controls If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #206

  Episode 206: Trust and Influence as CISO Survival Skills

  Sep 23, 202640 min

  In episode 206 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager speak with Julie Morris , Founder and Head of Thought Leadership at Persona Media , about why trust and influence have become survival skills for today's CISOs. Julie breaks down three types of organizational power, explains why the "good guys" resist the language of influence, and offers a practical starting point for anyone who's ever felt like PowerShell was the only power they understood. Here are some highlights from our episode: 02:13 . From old to new: A shift in how trust and influence factor into organizational structures 04:24 . The three kinds of power in an organization: hard, soft, and network 09:59 . Wise advice: Build your personal and professional network first 11:07 . How influence multiplies confidence with network power 12:03 . Inertia, fear, and status quo: overcoming the emotional reactions that oppose change 18:12 . How Sean uses the power of "slow down," not "no," to support AI transformation 20:49 . Why good thought leadership starts with empathy and self awareness 24:32 . Building organizational processes that "trigger" a change in CISOs' trust and influence 26:30 . Hugging Face as an example of how triggering moments become lessons 27:42 . What Tony Soprano has to do with measuring trust and influence 30:47 . Reality check: Every information gap gets filled one way or another 32:15 . The power of community and shared ideas in figuring out thought leadership together 36:09 : Advice: Be in the "river" of your network to go where you want to go 37:34 . How understanding of shared values helps to overcome imposter's syndrome Resources CIS Critical Security Controls® Episode 183: The Role of CISO in Supporting Risk Translation Episode 187: The Role of a CISO as a Strategic Storyteller Episode 192: How Leaders Balance Expertise and Communication Episode 199: Translating Cyber Risk into Business Decisions The Myth of Mythos: What It Means For Information Security Episode 202: Delineating AI Security and Cybersecurity If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #205

  Episode 205: Secure by Design — Now Updated for AI

  Sep 16, 202637 min

  In episode 205 of Cybersecurity Where You Are, Tony Sager speaks with Phyllis Lee , VP of SBP Content Development at the Center for Internet Security®(CIS®), and Steve Lipner , Executive Director of SAFECode . Together, they discuss how an updated document from CIS and SAFECode gives concrete guidance on what artificial intelligence (AI) means for your Secure by Design process. Here are some highlights from our episode: 02:17 . A refresher on making Secure by Design digestible for end organizations 02:57 . Distillation and prescriptive guidance: The value provided by CIS 06:53 . An overview of Butler Lampson's "Gold Standard of Security" 07:03 . How a shift in approach to Secure by Design led to the founding of SAFECode 09:42 . The importance of verification requirements for what developers have done 12:54 . A product of CIS pragmatism: Prioritization relative to the development environment 20:06 . Artifacts as evidence of secure software development at work 30:15 . How the updated document provides guidance around AI 30:45 . What AI creates instead of new classes of vulnerabilities Resources CIS Critical Security Controls® (CIS Controls®) Secure by Design Secure by Design v1.1 A Guide to Assessing Software Security Practices Turning Secure Software Development into a Measurable Practice CIS and SAFECode Release Secure by Design v1.1: A Guide to Assessing Software Security Practices Episode 164: Secure by Design in Software Development CIS Critical Security Control 16: Application Software Security Guide to Implementation Groups (IG): CIS Critical Security Controls v8.1 Episode 200: Alan Paller's Vision and Our Next Chapter From Prompts to Protocols: The Security Blueprint for Enterprise AI Mythos AI: What Actually Matters for Cybersecurity Leaders If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #204

  Episode 204: FWC26 and the New Bar for Event Security

  Sep 9, 202634 min

  In episode 204 of Cybersecurity Where You Are, Ryan Winmill , Chief Security Officer and Vice President of FIFA World Cup Boston, and John Cohen , Executive Director of the Office of Strategic Programs and Initiatives at the Center for Internet Security® (CIS®). Together, they discuss how FIFA World Cup 2026 (FWC26) — secured through an unprecedented tripartite governance framework, $625 million in U.S. Congressional funding, and real-time intelligence that stopped a swatting attempt at the finals — set a new standard for proactive event security worldwide. Here are some highlights from our episode: 01:18 . The "unprecedented" governance framework created for FWC26 03:53 . The role of CIS as a force multiplier for FIFA, host regions, and other partners 11:00 : Why you can't trust the person with an ego in large-scale event security planning 13:23 . How the threat environment evolved over the previous three World Cup tournaments 17:23 . A new bar for proactive event security going forward 18:43 . How CIS provided quality control that helped to mitigate swatting calls during FWC26 21:55 . Unique approaches used by host regions to better understand the World Cup fanbase 23:15 : How counterfeit FIFA volunteer uniforms triggered a cross-city credentialing response 26:46 . Recommendations for future large-scale event host cities 30:19 : Ryan's recommendation to future host cities: "Call CIS before you get started" Resources Special Event Risk Analysis & Advisory Services Episode 196: Securing FIFA World Cup 2026 Collaboratively Inside the Security Operation Behind the 2026 FIFA World Cup 3 Lessons for Securing Large-Scale Events: Inside FIFA World Cup 2026 Securing FIFA World Cup 2026 With a Collective Defense Approach If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #203

  Episode 203: Cyber Attacks' Human Impact — Beyond the Data

  Sep 2, 202634 min

  In episode 203 of Cybersecurity Where You Are, Sean Atkinson speaks with Pavlina Pavlova , Founder of Critical Cyber . Together, they discuss how Pavlina started Critical Cyber to go beyond the data and give voice to the human impact of cyber attacks, from ransomware hitting hospitals to cyber tactics targeting civilians in active conflict zones. Here are some highlights from our episode: 00:44 . How Pavlina's work covering the impact of cyber attacks on Ukrainian critical infrastructure led to Critical Cyber 03:13 . How Critical Cyber works with cyber attack victims, responders, and other audiences 04:08 . Countering the tendency, even among cybersecurity experts, to sanitize cyber attacks' human impact 08:57 . The use of storytelling with those impacted by cyber attacks to drive policy changes 15:02 . Why cyber attacks in some sectors are underreported 19:01 . Critical Cyber's mission of combining testimony, research, and expert collaboration 24:51 . Where Critical Cyber is and where it's looking to go Resources Critical Cyber Cybersecurity for Critical Infrastructure Episode 202: Delineating AI Security and Cybersecurity Recent Water Utility Attacks Offer a Blueprint for Resilience If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes

Recent guests on Cybersecurity Where You Are (video). Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.