OM DENNE EPISODE
In episode 199 of Cybersecurity Where You Are, Sean Atkinson and Tony Sager sit down with Chris Painter, Chair of the Risk Committee and Board Member at the Center for Internet Security® (CIS®). Together, they discuss how chief information security officers (CISOs) can support the work of translating cyber risk into business decisions by Boards.
Here are some highlights from our episode:
- 00:50. Introductions to Chris
- 01:36. The single biggest translation error Chris has seen CISOs make
- 07:38. Cyber risk quantification: An opportunity to go beyond translation for Boards
- 09:25. How ransomware changed Boards' understanding of cyber risks' business impact
- 10:45. The value of tabletop exercises (TTX) and other simulations in creating shared language
- 13:26. Recommendations on how to make the most of a TTX
- 18:37. Risk modeling and how artificial intelligence (AI) complicates probability estimations
- 21:51. "Pressure" (2026) as an illustration of making good, not 100% accurate, estimations
- 22:58. How growing public awareness of cyber is reshaping CISOs' conversations with Boards
- 25:55. The importance of walking Boards through risk mitigation steps with AI as an example
- 29:31. A recommendation for how CISOs can learn what directors care about
- 30:15. From "wizardry" to familiarity: An ongoing generational shift around cyber
Resources
- Episode 183: The Role of CISO in Supporting Risk Translation
- Episode 187: The Role of a CISO as a Strategic Storyteller
- Episode 192: How Leaders Balance Expertise and Communication
- How Risk Quantification Tests Your Reasonable Cyber Defense
- CIS RAM (Risk Assessment Method)
- Leveraging Generative Artificial Intelligence for Tabletop Exercise Development
- CIS Controls v8.1 Incident Response Policy Template
- You Have a Cybersecurity Incident. Now What?
- Prompt Injections: The Inherent Threat to Generative AI
- "Pressure" | Official Website | 29 May 2026
If you have some feedback or an idea for an upcoming episode of Cybersecurity Where You Are, let us know by emailing podcast@cisecurity.org.
Engelsk
USA
UDSKRIFT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
SØG BLANDT TIDLIGERE EPISODER
Søg efter gamle afsnit af Cybersecurity Where You Are (video).
ANDRE EPISODE I DENNE PODCAST
In episode 203 of Cybersecurity Where You Are, Sean Atkinson speaks with Pavlina Pavlova, Founder of Critical Cyber. Together, they discuss how Pavlina started Critical Cyber to go beyond the data and give voice to the human impact of cyber attacks, from ransomware hitting hospitals to cyber tactic…
In episode 201 of Cybersecurity Where You Are, Sean Atkinson and Ed Skoudis sit down with William Wright, Chief Executive Officer of Closed Door Security. Together, they reflect on the evolution of penetration testing, including the impact on pentesting from artificial intelligence (AI).
Here are s…
In episode 202 of Cybersecurity Where You Are, Sean Atkinson and Ed Skoudis sit down with Rob T. Lee, Chief of Research & Chief AI Officer at the SANS Institute. Together, they explore how the implications of multiple 2026 sandbox escapes of artificial intelligence (AI) models are starting to d…
In episode 200 of Cybersecurity Where You Are, Sean Atkinson, Tony Sager, and Ed Skoudis sit down with Frank Reeder, Co-Founder and Founding Chair of the Center for Internet Security® (CIS®). Together, they reflect on how Alan Paller's vision continues to drive CIS forward. In the spirit of that vi…
Ansvarsfraskrivelse: Podcasten og kunstværket, der er indlejret på denne side, er fra Center for Internet Security, som tilhører dens ejer og ikke er tilknyttet eller godkendt af Listen Notes, Inc.
REDIG
Tak fordi du hjælper med at holde podcast-databasen opdateret.
