Cybersecurity Where You Are (video)

Welcome to video version of “Cybersecurity Where You Are,” the podcast of the Center for Internet Security® (CIS®). Cybersecurity affects us all — whether we’re online at home, managing a company, supporting clients, or running a state or local government. Join us on Wednesdays as Sean Atkinson, CISO at CIS, and Tony Sager, SVP & Chief Evangelist at CIS, discuss trends and threats, explore security best practices, and interview experts in the industry. Together, we’ll clarify these issues, creating confidence in the connected world. Subscribe to the audio version of our podcast here: https://fast.wistia.net/embed/channel/wbyhaw35xf?wchannelid=wbyhaw35xf.

Cybersecurity Where You Are (video) is a technology podcast hosted by Center for Internet Security, with 200 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

Center for Internet Security hosts Cybersecurity Where You Are (video), a technology show with 200 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #200

  Episode 200: Alan Paller's Vision and Our Next Chapter

  Aug 12, 202641 min

  In episode 200 of Cybersecurity Where You Are, Sean Atkinson, Tony Sager, and Ed Skoudis sit down with Frank Reeder , Co-Founder and Founding Chair of the Center for Internet Security® (CIS®). Together, they reflect on how Alan Paller's vision continues to drive CIS forward. In the spirit of that vision, this milestone episode also marks a new chapter for the podcast: Ed Skoudis joins as co-host of Cybersecurity Where You Are. Here are some highlights from our episode: 01:09 . The two complementary missions of CIS 02:55 . Three defining moments that have shaped CIS into the organization it is today 08:10 . The story of naming CIS 10:31 . How CIS and SANS advance Alan Paller's vision of bringing people together 13:50 . Personal anecdotes of Alan Paller as a connector of people 15:45 . "What would Alan do?" A question that continues to guide CIS and SANS 22:00 . How CIS security best practices are emblematic of helping others 27:12 . CIS's "secret sauce" as a trusted, neutral platform for cybersecurity collaboration 29:53 . How CIS can continue to embody Alan Paller's philosophy into the future 37:47 . A special announcement: Ed Skoudis as a new co-host on the podcast Resources CIS Benchmarks® List CIS Critical Security Controls® Multi-State Information Sharing and Analysis Center® Episode 114: 3 Board Chairs Reflect on 25 Years of Community Alan Paller Laureate Program SANS Difference Makers Awards If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #199

  Episode 199: Translating Cyber Risk into Business Decisions

  Aug 5, 202637 min

  In episode 199 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager sit down with Chris Painter , Chair of the Risk Committee and Board Member at the Center for Internet Security® (CIS®). Together, they discuss how chief information security officers (CISOs) can support the work of translating cyber risk into business decisions by Boards. Here are some highlights from our episode: 00:50 . Introductions to Chris 01:36 . The single biggest translation error Chris has seen CISOs make 07:38 . Cyber risk quantification: An opportunity to go beyond translation for Boards 09:25 . How ransomware changed Boards' understanding of cyber risks' business impact 10:45 . The value of tabletop exercises (TTX) and other simulations in creating shared language 13:26 . Recommendations on how to make the most of a TTX 18:37 . Risk modeling and how artificial intelligence (AI) complicates probability estimations 21:51 . "Pressure" (2026) as an illustration of making good, not 100% accurate, estimations 22:58 . How growing public awareness of cyber is reshaping CISOs' conversations with Boards 25:55 . The importance of walking Boards through risk mitigation steps with AI as an example 29:31 . A recommendation for how CISOs can learn what directors care about 30:15 . From "wizardry" to familiarity: An ongoing generational shift around cyber Resources Episode 183: The Role of CISO in Supporting Risk Translation Episode 187: The Role of a CISO as a Strategic Storyteller Episode 192: How Leaders Balance Expertise and Communication How Risk Quantification Tests Your Reasonable Cyber Defense CIS RAM (Risk Assessment Method) Leveraging Generative Artificial Intelligence for Tabletop Exercise Development CIS Controls v8.1 Incident Response Policy Template You Have a Cybersecurity Incident. Now What? Prompt Injections: The Inherent Threat to Generative AI "Pressure" | Official Website | 29 May 2026 If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #198

  Episode 198: AI Privacy from a Risk-Based Perspective

  Jul 29, 202631 min

  In episode 198 of Cybersecurity Where You Are, Sean Atkinson discusses artificial intelligence (AI) and privacy from a risk-based cybersecurity perspective. Together, he explores how organizations and individuals can assess AI risk, apply governance frameworks, evaluate third-party AI services, and balance innovation with due diligence. Here are some highlights from our episode: 00:41 . Framing the conversation around AI, privacy, and risk-based controls 02:22 . Due diligence and ethical considerations around AI products and services 03:14 . Data minimization and transparency as foundations for AI privacy 04:46 . Privacy impact assessments as a way to understand AI data collection and use 05:42 . AI governance and the tension between implementation velocity and risk management 10:08 . The use of existing data flows and controls in AI assessments 11:57 . Algorithmic transparency and the challenge of understanding AI decision making 13:47 . Standards, frameworks, and data sovereignty in AI privacy governance 15:12 . Encryption, anonymization, tokenization, and federated learning as privacy safeguards 16:40 . The need to shift stakeholder input left in AI development and deployment lifecycles 19:13 . Building literacy around security, data management, privacy, and AI risk 23:40 . The value of cross-functional and written assessment criteria for AI risk 26:21 . A call to action for keeping pace with AI privacy and and innovation risk Resources CIS Controls v8.1.2 AI Security Guidance Workbook Episode 105: Context in Cyber Risk Quantification Service Provider Management Policy Template for CIS Control 15 EU AI Act: first regulation on artificial intelligence AI Risk Management Framework IAPP AI Governance Center Episode 120: How Contextual Awareness Drives AI Governance Secure by Design v1.1 A Guide to Assessing Software Security Practices Reasonable Cybersecurity If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #197

  Episode 197: AI-ready OT Data Begins with Understanding

  Jul 22, 202633 min

  In episode 197 of Cybersecurity Where You Are, Sean Atkinson sits down with Ben Wilcox , Chief Technology Officer and Chief Information Security Officer at ProArch; and Ed Skoudis , President of SANS Technology Institute. Together, they discuss artificial intelligence (AI), operational technology (OT) data, and how understanding creates the foundation for AI-ready OT data. Here are some highlights from our episode: 00:54 . Introductions to Ben and Ed 02:16 . How we understand and integrate AI into OT environments 04:30 . How OT diverges from information technology (IT) in data responsibilities 05:23 . Opportunities for AI to assist OT 06:33 . The importance of meeting OT systems where they are 08:10 . A passive and incremental approach that respects the operations machines are doing 12:29 . Efficiency gains, public safety improvements, and other benefits of AI-ready OT data 17:47 . What lifecycle management, asset hierarchies, and governance look like for OT data 22:14 . The promise of AI to help to make OT environments understandable 23:19 . A team sport: How IT and OT can work together to understand assets and data 28:38 . The need for translation in IT-OT communication 29:01 . Recommendations for how to make OT data AI ready Resources CIS Critical Security Controls® CIS Controls version 8.1 ICS Workbook Artificial Intelligence and Large Language Models Companion Guide CIS Controls v8.1 Enterprise Asset Management Policy Template CIS Controls v8.1 Software Asset Management Policy Template CIS Controls v8.1 Data Management Policy Template CIS Controls v8.1 Account & Credential Management Policy Template Establishing Essential Cyber Hygiene ProArch Cybersecurity for Critical Infrastructure Episode 77: Data's Value to Decision-Making in Cybersecurity Episode 183: The Role of CISO in Supporting Risk Translation If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #196

  Episode 196: Securing FIFA World Cup 2026 Collaboratively

  Jul 15, 202637 min

  In episode 196 of Cybersecurity Where You Are, Sean Atkinson sits down with Sasha Larkin , Director of Intelligence and C4 Operations for FIFA World Cup 2026, and John Cohen , Executive Director of the Office of Strategic Programs and Initiatives at the Center for Internet Security® (CIS®). Together, they discuss how CIS, FIFA, and FIFA World Cup 2026 host cities started collaborating in 2025 on cybersecurity, public safety, intelligence, and information-sharing efforts supporting the largest sporting event in the world. Here are some highlights from our episode: 00:40 . Introductions to Sasha and John 02:07 . Overview of one of the most complex public safety efforts assembled for a sporting event 05:52 . Consistency: A standard for preventing and deterring threats at FIFA World Cup 2026 10:30 . The impact of relationships in shaping FIFA's security ops and information sharing 11:53 . Effective communication: The key to cross-functional collaboration in support of the tournament 18:07 . The importance of information that guides operations 20:35 . Education as a way to inform stakeholders and deploy resources 26:19 . A deliberate effort to look at unanticipated threats and plan for them 29:14 . Examples of messaging synchronization in support of FIFA World Cup 2026 32:37 . An all-hands-on-deck support campaign from CIS 33:29 . Parting thoughts around large-scale event support in the future Resources An Examination of Generative AI and Physical Threat Planning An Examination of AI-Enabled Threats to Event and Stadium Security Multidimensional Threats 5 Major Emerging Risks to Large-Scale Events Illicit Sports Betting and Match Integrity Risks to Large-Scale Events Deepfakes and Synthetic Media: The Emerging Threat to Large-Scale Public Gatherings Growing Risks to Digital Ticketing Platforms for Large-Scale Events Unmanned Aircraft Systems (UAS): Evolving Risks to Large-Scale Public Gatherings Unmanned Aircraft Systems (UAS): Evolving Risks to Large-Scale Public Gatherings Cyber Risks Companion Guide 5 Steps to Help Secure Your City before a Large-Scale Event If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes

Recent guests on Cybersecurity Where You Are (video). Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.