Cybersecurity Where You Are (video)

Welcome to video version of “Cybersecurity Where You Are,” the podcast of the Center for Internet Security® (CIS®). Cybersecurity affects us all — whether we’re online at home, managing a company, supporting clients, or running a state or local government. Join us on Wednesdays as Sean Atkinson, CISO at CIS, and Tony Sager, SVP & Chief Evangelist at CIS, discuss trends and threats, explore security best practices, and interview experts in the industry. Together, we’ll clarify these issues, creating confidence in the connected world. Subscribe to the audio version of our podcast here: https://fast.wistia.net/embed/channel/wbyhaw35xf?wchannelid=wbyhaw35xf.

Cybersecurity Where You Are (video) is a technology podcast hosted by Center for Internet Security, with 205 episodes on record and a Required Pod Score of 80.

Center for Internet Security hosts Cybersecurity Where You Are (video), a technology show with 205 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Episode #206

  Episode 206: Trust and Influence as CISO Survival Skills

  Sep 23, 202640 min

  In episode 206 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager speak with Julie Morris , Founder and Head of Thought Leadership at Persona Media , about why trust and influence have become survival skills for today's CISOs. Julie breaks down three types of organizational power, explains why the "good guys" resist the language of influence, and offers a practical starting point for anyone who's ever felt like PowerShell was the only power they understood. Here are some highlights from our episode: 02:13 . From old to new: A shift in how trust and influence factor into organizational structures 04:24 . The three kinds of power in an organization: hard, soft, and network 09:59 . Wise advice: Build your personal and professional network first 11:07 . How influence multiplies confidence with network power 12:03 . Inertia, fear, and status quo: overcoming the emotional reactions that oppose change 18:12 . How Sean uses the power of "slow down," not "no," to support AI transformation 20:49 . Why good thought leadership starts with empathy and self awareness 24:32 . Building organizational processes that "trigger" a change in CISOs' trust and influence 26:30 . Hugging Face as an example of how triggering moments become lessons 27:42 . What Tony Soprano has to do with measuring trust and influence 30:47 . Reality check: Every information gap gets filled one way or another 32:15 . The power of community and shared ideas in figuring out thought leadership together 36:09 : Advice: Be in the "river" of your network to go where you want to go 37:34 . How understanding of shared values helps to overcome imposter's syndrome Resources CIS Critical Security Controls® Episode 183: The Role of CISO in Supporting Risk Translation Episode 187: The Role of a CISO as a Strategic Storyteller Episode 192: How Leaders Balance Expertise and Communication Episode 199: Translating Cyber Risk into Business Decisions The Myth of Mythos: What It Means For Information Security Episode 202: Delineating AI Security and Cybersecurity If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #205

  Episode 205: Secure by Design — Now Updated for AI

  Sep 16, 202637 min

  In episode 205 of Cybersecurity Where You Are, Tony Sager speaks with Phyllis Lee , VP of SBP Content Development at the Center for Internet Security®(CIS®), and Steve Lipner , Executive Director of SAFECode . Together, they discuss how an updated document from CIS and SAFECode gives concrete guidance on what artificial intelligence (AI) means for your Secure by Design process. Here are some highlights from our episode: 02:17 . A refresher on making Secure by Design digestible for end organizations 02:57 . Distillation and prescriptive guidance: The value provided by CIS 06:53 . An overview of Butler Lampson's "Gold Standard of Security" 07:03 . How a shift in approach to Secure by Design led to the founding of SAFECode 09:42 . The importance of verification requirements for what developers have done 12:54 . A product of CIS pragmatism: Prioritization relative to the development environment 20:06 . Artifacts as evidence of secure software development at work 30:15 . How the updated document provides guidance around AI 30:45 . What AI creates instead of new classes of vulnerabilities Resources CIS Critical Security Controls® (CIS Controls®) Secure by Design Secure by Design v1.1 A Guide to Assessing Software Security Practices Turning Secure Software Development into a Measurable Practice CIS and SAFECode Release Secure by Design v1.1: A Guide to Assessing Software Security Practices Episode 164: Secure by Design in Software Development CIS Critical Security Control 16: Application Software Security Guide to Implementation Groups (IG): CIS Critical Security Controls v8.1 Episode 200: Alan Paller's Vision and Our Next Chapter From Prompts to Protocols: The Security Blueprint for Enterprise AI Mythos AI: What Actually Matters for Cybersecurity Leaders If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #204

  Episode 204: FWC26 and the New Bar for Event Security

  Sep 9, 202634 min

  In episode 204 of Cybersecurity Where You Are, Ryan Winmill , Chief Security Officer and Vice President of FIFA World Cup Boston, and John Cohen , Executive Director of the Office of Strategic Programs and Initiatives at the Center for Internet Security® (CIS®). Together, they discuss how FIFA World Cup 2026 (FWC26) — secured through an unprecedented tripartite governance framework, $625 million in U.S. Congressional funding, and real-time intelligence that stopped a swatting attempt at the finals — set a new standard for proactive event security worldwide. Here are some highlights from our episode: 01:18 . The "unprecedented" governance framework created for FWC26 03:53 . The role of CIS as a force multiplier for FIFA, host regions, and other partners 11:00 : Why you can't trust the person with an ego in large-scale event security planning 13:23 . How the threat environment evolved over the previous three World Cup tournaments 17:23 . A new bar for proactive event security going forward 18:43 . How CIS provided quality control that helped to mitigate swatting calls during FWC26 21:55 . Unique approaches used by host regions to better understand the World Cup fanbase 23:15 : How counterfeit FIFA volunteer uniforms triggered a cross-city credentialing response 26:46 . Recommendations for future large-scale event host cities 30:19 : Ryan's recommendation to future host cities: "Call CIS before you get started" Resources Special Event Risk Analysis & Advisory Services Episode 196: Securing FIFA World Cup 2026 Collaboratively Inside the Security Operation Behind the 2026 FIFA World Cup 3 Lessons for Securing Large-Scale Events: Inside FIFA World Cup 2026 Securing FIFA World Cup 2026 With a Collective Defense Approach If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #203

  Episode 203: Cyber Attacks' Human Impact — Beyond the Data

  Sep 2, 202634 min

  In episode 203 of Cybersecurity Where You Are, Sean Atkinson speaks with Pavlina Pavlova , Founder of Critical Cyber . Together, they discuss how Pavlina started Critical Cyber to go beyond the data and give voice to the human impact of cyber attacks, from ransomware hitting hospitals to cyber tactics targeting civilians in active conflict zones. Here are some highlights from our episode: 00:44 . How Pavlina's work covering the impact of cyber attacks on Ukrainian critical infrastructure led to Critical Cyber 03:13 . How Critical Cyber works with cyber attack victims, responders, and other audiences 04:08 . Countering the tendency, even among cybersecurity experts, to sanitize cyber attacks' human impact 08:57 . The use of storytelling with those impacted by cyber attacks to drive policy changes 15:02 . Why cyber attacks in some sectors are underreported 19:01 . Critical Cyber's mission of combining testimony, research, and expert collaboration 24:51 . Where Critical Cyber is and where it's looking to go Resources Critical Cyber Cybersecurity for Critical Infrastructure Episode 202: Delineating AI Security and Cybersecurity Recent Water Utility Attacks Offer a Blueprint for Resilience If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes
• 

  Episode #202

  Episode 202: Delineating AI Security and Cybersecurity

  Aug 26, 202639 min

  In episode 202 of Cybersecurity Where You Are, Sean Atkinson and Ed Skoudis sit down with Rob T. Lee , Chief of Research & Chief AI Officer at the SANS Institute. Together, they explore how the implications of multiple 2026 sandbox escapes of artificial intelligence (AI) models are starting to delineate AI security and cybersecurity. Here are some highlights from our episode: 02:00 . The historical context of one AI model's 2026 sandbox escape 03:26 . The impact of ethics, guardrails, and misconfigurations in an AI containment breach 06:08 . Why context matters when talk of AI models "going rogue" surfaces 11:49 . How history helps us to delineate AI security and cybersecurity 13:47 . A new skill and mindset to match our refined AI risk understanding 15:43 . Rules and cybersecurity implementation as a possible way forward 19:04 . The double-edged sword of restricting access to open-weight models 23:25 . Recommendations for keeping up with what's changing in the AI security space 25:51 . Rob's advice: To learn how to defend a thing, try learning how to build it first 28:23 . AI governance and seeing through the "slop" to informed conversation 29:54 . The use of AI to learn more about and discuss AI security for years to come Resources OpenAI says its AI technology acted on its own in an ‘unprecedented’ hack of another company Pacing model development in an era of cyber-critical capabilities Black Hat USA 2026 | The 'Breaking' News: The OpenAI–Hugging Face Incident Episode 193: AI Security and Responsibility in EO 14409 The AI Daily Brief — Daily AI News & Analysis AI Playbooks for SLTT Cybersecurity Leaders SANS Cybersecurity Summits SANS NewsBites If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing  podcast@cisecurity.org .

  ListenShow Notes

Recent guests on Cybersecurity Where You Are (video). Study who booked and why before you pitch.

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.