The Cyber Ranch Podcast

Developing and Fostering Good Leadership with Joey Rachid and Scott Moser

01 Feb 2023

Contributed by Lukas

Joining Allan today are two folks who are passionate about leadership – not just practicing good leadership, but instilling good leadership in futur...

Are We Protecting People, Data, or Business? with Nipun Gupta

25 Jan 2023

Contributed by Lukas

This week Allan is joined by Nipun Gupta, and industry veteran who has been a consultant, practitioner, vendor, advisor and investor. The topic is "Wh...

Influences from Outside of Cybersecurity with Peter Schawacker

18 Jan 2023

Contributed by Lukas

This week, Allan is joined by Peter Schawacker, CEO @ Nearshore Cyber, former CISO, advisor to MSPs, etc.  Another one of Allan's illustrious guests ...

Managing Careers with Luis Valenzuela

11 Jan 2023

Contributed by Lukas

This episode is jam-packed with wisdom that is delivered at a rapid pace.  Some folks will find themselves rewinding and taking notes.  Luis Valenzu...

100th Episode Call-In Special with 21 Guests!

04 Jan 2023

Contributed by Lukas

To celebrate the 100th episode, Allan decided to let the audience participate in the show.  21 people called in and answered a wide variety of questi...

Can We Even Measure Risk? with Andy Ellis and Chris Roberts - EXPLICIT

14 Dec 2022

Contributed by Lukas

This is another "'E' for explicit" show as this one is another LIVE! show from the CISO XC conference in Dallas-Fort Worth. Why the 'E'?  Because hal...

Is It Even Our Job to Make Them Care About Cybersecurity? with Yaron Levi

07 Dec 2022

Contributed by Lukas

In this episode, Allan Alford plays Devil's advocate - challenging the practitioner community to refute the idea that we should quit trying to make th...

Building Cybersecurity Community with Scott Schindler

30 Nov 2022

Contributed by Lukas

Scott Schindler, veteran CISO, vCISO, and adjunct professor joins Allan at the ranch to talk about how to build, strengthen, participate in, contribut...

Geopolitics, APTs and Cybersecurity with Dan Holden

16 Nov 2022

Contributed by Lukas

Dan Holden, a 20+ year industry veteran, former vendor, and current CISO at Big Commerce joins Allan Alford at the ranch to talk about the BIG picture...

3 Very Practical Tips with Duane Gran

09 Nov 2022

Contributed by Lukas

This week Allan Alford is joined by Duane Gran, Director of Information Security at Converge Technology Solutions to discuss three different aspects o...

Should the CISO...? with Andy Bennett

02 Nov 2022

Contributed by Lukas

In this week's show, Allan and his guest Andy Bennett (a very clever CISO with a heck of a pedigree) decide to tackle some thought exercises with a se...

Tired Topics in Cybersecurity - Part Two with Michael Santarcangelo and Rich Mason

26 Oct 2022

Contributed by Lukas

Once again, Allan, Rich, and Michael dissect topics in our community that are, well, tired. Topics are brought up to spur online debate, but for which...

Tired Topics in Cybersecurity - Part One with Rich Mason and Michael Santarcangelo

19 Oct 2022

Contributed by Lukas

We have all seen the conversations on LinkedIn where someone starts with a hotly debated topic, and the debate goes on and on, nothing is concluded, a...

One Tool to Rule Them All with Derly Gutierrez

12 Oct 2022

Contributed by Lukas

CISOs and other security executives have relied on spreadsheets to perform a great deal of the management functions of their programs. What if there w...

Cybersecurity Myths & Misconceptions with Josiah Dykstra

05 Oct 2022

Contributed by Lukas

Josiah Dykstra, Cybersecurity Technical Fellow at the NSA and Author, kicks up the dust off some previous topics discussed on the Ranch and deepens th...

Entrepreneurship After the Golden Handcuffs with Christian Espinosa

28 Sep 2022

Contributed by Lukas

Christian Espinosa, Author, Speaker, and CEO, comes down to the Ranch to talk about the journey of starting, growing, selling, and moving on from the ...

How APIs Expose Business Logic Flaws with Chuck Herrin

21 Sep 2022

Contributed by Lukas

Chuck Herrin, CTO at Wib, came down to the Ranch to explain the risks and threats currently facing APIs, or application programming interfaces. Simply...

What Is (And Isn’t) a CISO with Matthew Lang

14 Sep 2022

Contributed by Lukas

Matthew Lang, former CISO at SECU, former CISO of 3D Systems, and former Chief Petty Officer in the US Navy, comes on down to the Ranch to talk about ...

Fighting the Increase in Cyber Attacks with Leon Ravenna

07 Sep 2022

Contributed by Lukas

Leon Ravenna, CISO & CIO at KAR Global, former VP of Security & Compliance at Interactive Intelligence joins Allan this week to talk about the increas...

Understanding SEC’s Proposal for Cyber Risk Management with Yaron Levi

31 Aug 2022

Contributed by Lukas

Yaron Levi, current CISO at Dolby and former CISO at Blue Cross Blue Shield in Kansas City, comes down to the Ranch to talk about the March 2022 propo...

Ask CISO Allan Alford Anything pt. 2

24 Aug 2022

Contributed by Lukas

Allan Alford, CISO/CTO and host of the Cyber Ranch podcast, resumes his session of AMA, or “ask me anything,” to cover the remaining questions lef...

Ask CISO Allan Alford Anything

17 Aug 2022

Contributed by Lukas

Allan Alford, CISO/CTO and host of the Cyber Ranch podcast, changes things up this week with a session of AMA, or “ask me anything”. Instead of ho...

When a CISO Writes a Book with George Finney & Robert Pace

10 Aug 2022

Contributed by Lukas

Cybersecurity practitioners give back to the community by recording Youtube videos, interviewing in magazines, or creating podcasts— just like this ...

Doing More by Doing Less with Drew Simonis

03 Aug 2022

Contributed by Lukas

Drew Simonis, CISO at Juniper Networks, discusses the debate of doing more by doing less. So often in cybersecurity, practitioners think they have to ...

Getting Back to the Basics with Sonja Hammond

27 Jul 2022

Contributed by Lukas

Sonja Hammond, Vice President & CISO at National Veterinary Associates, brings her love of animals and more importantly her love for security basics d...

Debunking Cyber Myths with Adrian Sanabria

20 Jul 2022

Contributed by Lukas

Adrian Sanabria, Director of Product Management at Tenchi Security, arrives at the Ranch this week to debunk cyber myths and expose industry lies. Usi...

Privacy Professionals & Regulatory Headaches with Adam Stone

13 Jul 2022

Contributed by Lukas

Adam Stone, Chief Privacy Officer at TrustMAPP, brings his decades of security and privacy knowledge to the Ranch this week to talk about the discipli...

The Overrated in Cybersecurity with Jerry Perullo

06 Jul 2022

Contributed by Lukas

Jerry Perullo, former CISO of the NYSE, former chairman of the board off the FS-ISAC, founder, professor, and host of the Life After CISO podcast, com...

Better User Awareness Training with Tim Silverline

29 Jun 2022

Contributed by Lukas

Tim Silverline, VP of Security at Gluware, joins host Allan Alford on the Ranch this week for a discussion about user awareness training and the lates...

The Founder-Angel Investor Connection with Sameer Sait & John Stewart

22 Jun 2022

Contributed by Lukas

Allan invites a founder and an angel investor to the ranch this week to talk about how founders and angel investors really connect. Meet Sameer Sait, ...

Open Door Security w/ James Allan-McLean

15 Jun 2022

Contributed by Lukas

“When people come to Security and tell you everything they are doing, that’s a real win.” - James Allan-McLean    Allan is joined by James All...

DevSecOps w/ Chris Hughes

08 Jun 2022

Contributed by Lukas

Allan is joined by Chris Hughes, CISO & Co-founder at Aquia and adjunct professor at UMGC, to talk about all things DevSecOps (Development, Security a...

Board Reporting Metrics Pt. 2 w/ Andy Ellis

01 Jun 2022

Contributed by Lukas

Andy Ellis, CISO at Orca Security, is back for part 2 of this series on Board Reporting Metrics. In Episode 1, Andy and host Allan Alford addressed so...

Board Reporting Metrics Pt. 1 w/ Andy Ellis

25 May 2022

Contributed by Lukas

In this episode, Allan is joined by the CISO at Orca Security, Andy Ellis, to share his thoughts on board reporting metrics. What does the board need ...

Getting a Seat at “The Table” w/ Brent Deterding

18 May 2022

Contributed by Lukas

“Having a seat at the table doesn’t mean getting your way all the time. It means having a seat and I think that is very important to understand.”...

All About SBOMs w/ Chris Castaldo

11 May 2022

Contributed by Lukas

“Knowing what’s in your software, in your organization, can help you quickly determine if you are impacted by a new vulnerability.” - Chris Cast...

Total Greenfield Innovation w/ Guillaume Ross

04 May 2022

Contributed by Lukas

What would you do if you could build your security program from scratch?  In this episode, Allan is joined by the Head of Security at Fleet, Guillaum...

Securing Cryptocurrency and NFTs w/ Nick Percoco

27 Apr 2022

Contributed by Lukas

What are the security implications of cryptocurrency and NFTs and what do we need to know in order to transact safely? In this episode, Allan is joine...

”Playing Well With Others” - The Tech Stack w/ Tommy Todd

20 Apr 2022

Contributed by Lukas

Allan is joined by the Vice President of Security at Code42, Tommy Todd, to talk about how the tech stack can “play well with others”. In this epi...

Thriving In A Male Dominated Industry w/ Ashley Rose

13 Apr 2022

Contributed by Lukas

Allan is joined by the founder and CEO of Living Security, Ashley Rose, to speak about her experiences as a female entrepreneur and leader in a male d...

Why CISOs and CIOs Don’t Get Along w/ Nick Vigier

06 Apr 2022

Contributed by Lukas

This episode of the Cyber Ranch Podcast was recorded LIVE on stage at the CISO 360 Conference in New York City, hosted by Pulse Conferences. Nick Vigi...

Learned Helplessness in Cybersecurity w/ Steve Mancini

30 Mar 2022

Contributed by Lukas

This topic couldn’t be more relevant given recent events in the security community. Allan Alford is joined by Steve Mancini, CISO at Eclypsium, to h...

Leveraging Employee Strengths for Cyber Roles w/ Nick Vigier

23 Mar 2022

Contributed by Lukas

There are numerous personality tests available to help identify personality traits, but many of them have very little scientific validity or reliabili...

A Full Data Approach w/ Paola Saibene

16 Mar 2022

Contributed by Lukas

In the episode, Allan is joined by the Principal at Teknion Data Solutions, Paola Saibene, to bring clarity to an often misunderstood topic: data gove...

The Great Resignation & Cybersecurity w/ Jessie Bolton

09 Mar 2022

Contributed by Lukas

With a looming skills/people gap in cybersecurity and retention at an all time low, it begs the question: Where is everyone? In this episode, Allan Al...

How Old is Data Risk Management? w/ G. Mark Hardy

02 Mar 2022

Contributed by Lukas

In this episode, Allan is joined by the President at National Security Corporation, Navy veteran, and host of the CISO Tradecraft podcast, G. Mark Har...

CISOs as Caretakers w/ Randy Potts

23 Feb 2022

Contributed by Lukas

In this episode of The Cyber Ranch Podcast, Allan is joined by the CISO at Real Time Resolutions, Randy Potts. The two sit down to have a refreshing a...

Cyber Mentoring w/ David Belanger

16 Feb 2022

Contributed by Lukas

In this episode, Allan is joined by David Belanger, CISO at Maxor National Pharmacy, to talk about the challenges of breaking into cybersecurity. Davi...

Rationalizing the Tech Stack w/ Mark Butler

09 Feb 2022

Contributed by Lukas

In this episode, Allan invites Mark Butler, an Advisory CISO at TRACE3, to talk about tech stack rationalization and how to get the most out of your t...

Penetration Testing Programs LIVE w/ Phillip Wylie

02 Feb 2022

Contributed by Lukas

In this episode, Allan is joined LIVE on stage at FutureCon Dallas 2022 by U.S Bank Senior Cloud Penetration Tester, co-author of The Pen Tester Bluep...

What We’re Doing Wrong in the SOC w/ Yaron Levi

26 Jan 2022

Contributed by Lukas

Allan is joined by Yaron Levi, CISO at Dolby, to talk about the SOC and why we are going about it all wrong. Allan and Yaron identify and examine the ...

Cybersecurity Centers of Excellence w/ Rafal Los

19 Jan 2022

Contributed by Lukas

Allan is joined by Rafal Los, industry innovator, strategist, and personality. His career spans 20+ years while working inside companies from the Fort...

Investing in Cybersecurity Startups w/ Kathy Wang

12 Jan 2022

Contributed by Lukas

Join Allan as he discusses investing in cybersecurity startups with the perfect guest for the subject: Kathy Wang, CISO at Very Good Security, investo...

50th Episode Special w/ Many Guests

05 Jan 2022

Contributed by Lukas

In this special episode, Allan invites a few familiar voices back to the show, conducts a countdown of his Top 5 most popular shows, and reviews some ...

Minimum Viable Security w/ Chris Roberts & Cecil Pineda: EXPLICIT CONTENT

22 Dec 2021

Contributed by Lukas

Allan hosts a live podcast at the August, 2021 CISO XC event in the Dallas-Forth Worth area. He is joined by Chris Roberts, chief geek at Hillbilly Hi...

Organizational Resilience w/ Marnie Wilking

15 Dec 2021

Contributed by Lukas

In this episode, Allan is joined by Marnie Wilking, CISO at Wayfair. Marnie has directed Information Security and multi-discipline Risk Management Pro...

The vCISO Life w/ Dan Doggendorf

08 Dec 2021

Contributed by Lukas

Welcome to another live show of the Cyber Ranch! Allan is joined by Dan Doggendorf, a creative cybersecurity leader with a passion for simplicity, eff...

GRC: ”Now What?” w/ Security & Compliance Weekly

01 Dec 2021

Contributed by Lukas

This week, Allan is joined by Frederick Lee aka “Flee”, Chief Security Officer and Head of IT at Gusto, Jeff Man, host of Security & Compliance We...

The CMO‘s Perspective w/ Nathan Burke and Julie O‘Brien

24 Nov 2021

Contributed by Lukas

CISOs complain on social media about bad marketing – when they are targeted inappropriately, or with messages that don’t resonate, or with message...

Practical Working (And Hiring!) from Home w/ Brian Castagna

17 Nov 2021

Contributed by Lukas

Brian Castagna (CISO at Seven Bridges - a genomics company) is a CISO with a proven track record of successfully building information security program...

Threat-Informed Defense, CISA, CVEs and ATT&CK w/ MITRE Engenuity

10 Nov 2021

Contributed by Lukas

This week, Allan is joined by some serious heavy hitters in cyber. Richard Struse (Director for the Center for Threat-Informed Defense at MITRE Engenu...

A Day in the Life of Two CISOs w/ Mustapha Kebbeh

03 Nov 2021

Contributed by Lukas

Mustapha Kebbeh, CISO at Brinks and heavy-hitter in the Dallas/Fort Worth Cyber community, joins Allan again this week as they cover a topic Mustapha ...

Practical Trust-Centric Security w/ Omar Khawaja

27 Oct 2021

Contributed by Lukas

Omar Khawaja is an experienced CISO with a strong technical background, who managed to find some very creative ways to manage his security program tha...

CISO in the Supply Chain w/ Emilio Escobar

20 Oct 2021

Contributed by Lukas

Allan is joined this week by Emilio Escobar, CISO at Data Dog and former VP of Information Security at Hulu. He is also a long-term developer of Etter...

Is Resilience Even the Goal? Antifragility w/ Sounil Yu

14 Oct 2021

Contributed by Lukas

Allan is joined by Sounil Yu, one of cybersecurity's most well-known contributors. Sounil has a long history in cybersecurity, and is also the invento...

Is the SOC Dead? w/ Erik Bloch

07 Oct 2021

Contributed by Lukas

Allan's guest this week is Erik Bloch. Erik Bloch is a cyber security leader, influencer, and pioneer. He currently sits as Senior Director of Detecti...

The Value of Threat Intelligence w/ Samara Williams

29 Sep 2021

Contributed by Lukas

Allan's guest is Samara Williams, Manager of Threat Operations at Cardinal Health, speaker, advocate and passionate member of the threat intelligence ...

Practical Realities of Ransomware Management w/ Bryan Hurd

22 Sep 2021

Contributed by Lukas

This week, Allan is joined by Bryan Hurd. Bryan is a multi-talented cyber security professional who has founded and operated programs dating back to t...

WHY We Measure Risk w/ Sameer Sait

15 Sep 2021

Contributed by Lukas

In this episode Allan interviews his friend Sameer Sait, former CISO at Amazon, Forcepoint and Arrow Electronics, who joins Allan for a discussion abo...

What Comes After the CISO Role? w/ Helen Patton

08 Sep 2021

Contributed by Lukas

Host Allan Alford interviews his friend Helen Patton, advisory CISO at Cisco, and former CISO at Ohio State University. Helen and Allan discuss the ca...

Humans Are Not the Weakest Link in Cybersecurity w/ George Finney

01 Sep 2021

Contributed by Lukas

Allan is joined by George Finney, CSO at Southern Methodist University and author of the book Well Aware: Master the Nine Cybersecurity Habits to Prot...

Does SOAR Meet Its Promises? w/ Benjamin Corll

25 Aug 2021

Contributed by Lukas

Host Allan Alford interviews Benjamin Corll, VP of Cybersecurity and Privacy at Coats, about security orchestration, automation, and response (SOAR). ...

The Modern CISO w/ James Azar

18 Aug 2021

Contributed by Lukas

Host Allan Alford interviews guest James Azar, host of the CyberHub CISO Talk Podcast, and CISO in the financial services space. James and Allan discu...

Frameworks Over Time w/ Derly Gutierrez, Mustapha Kebbeh and Patrick Benoit

11 Aug 2021

Contributed by Lukas

In this, the very first LIVE episode, Allan Alford interviews guests Derly Gutierrez, Head of Information Security at 1010Data, Patrick Benoit, BISO a...

Burnout, Toxicity, and Overcoming Obstacles w/ Marilise de Villiers

04 Aug 2021

Contributed by Lukas

On this episode, Allan invites Marilise de Villiers, Founder and CEO at ROAR! Coaching & Consulting, to come on down to the ranch and discuss how to d...

Migrating from Monolithic to Cloud w/ Greg Rogers

28 Jul 2021

Contributed by Lukas

In this episode, Allan interviews Greg Rogers, CISO at Legal & General America, about migrating legacy, monolithic, internally facing, manually tested...

Credential Stuffing w/ Dr. Sam Small

21 Jul 2021

Contributed by Lukas

In this episode, Allan's friend Dr. Sam Small, CISO of Zero Fox, joins us to chat about credential stuffing, its implications and the defenses against...

”Ugly Exits” w/ Naomi Buckwalter

14 Jul 2021

Contributed by Lukas

On today’s episode with Allan, we talk “Ugly Exits” with Naomi Buckwalter, Director of Information Security. Of course, to start the episode, N...

Agile for Security Programs w/ Tim Rohrbaugh

07 Jul 2021

Contributed by Lukas

On today’s episode with Allan, we have Tim Rohrbaugh, CISO at JetBlue, here to talk about Agile methodology and how it can be applied to an entire s...

All About Analysts w/ Christina Richmond

30 Jun 2021

Contributed by Lukas

With us today is Christina Richmond program Vice President at IDC. She's an industry analyst, and she's here to talk to us all about the analyst lifes...

The Journey to Passwordless Authentication w/ Derly Gutierrez

23 Jun 2021

Contributed by Lukas

With us today is Derly Gutierrez, Head of Security at 1010 Data, and veteran. Derly is here with us today to talk about the journey to passwordless a...

Application Security w/ Taylor Lehmann

16 Jun 2021

Contributed by Lukas

With us today is Taylor Lehmann, former ciso several times over in the healthcare sector, and currently Americas leader for security, networking, iden...

Solving The Global Cyber Problem w/ Ian Thorton-Trump

09 Jun 2021

Contributed by Lukas

With us today is Ian Thornton-Trump, Chief Information Security Officer at Cyjax and an ITIL-certified IT professional with 25 years of experience in ...

FAIR from the Trenches w/ Drew Brown

02 Jun 2021

Contributed by Lukas

With us today is Drew Brown, IT Security Manager at the Commonwealth of Pennsylvania. Drew is here to talk about FAIR and his real-world usage of it a...

Clever Hiring Practices w/ Andy Ellis

26 May 2021

Contributed by Lukas

With us today is Andy Ellis, operating partner at YL Ventures, former Akamai CSO and newly inducted member of the CSO Hall of Fame. We're here to talk...

Measuring Risk w/ Richard Seiersen

19 May 2021

Contributed by Lukas

Today we talk with Richard Seiersen, co-author of “How to Measure Anything in Cybersecurity Risk”. Richard shared that at his first CISO positi...

Becoming a CISO w/ Accidental CISO

12 May 2021

Contributed by Lukas

With us today, is a very special guest, Accidental CISO, of Twitter fame. His anonymity on Twitter, allows him to be a little more “truthy” about...

Breach & Attack Simulation w/ Marlys Rodgers

05 May 2021

Contributed by Lukas

Today we talk with Marlys Rodgers, who has been in cyber for over 20 years. She currently is CISO for CSAA Insurance Group and is running security fo...

Enterprise Security Architecture: A $110b Case Study w/ John Petrie

28 Apr 2021

Contributed by Lukas

With us today is John Petrie, Counselor to the NTT Global CISO. He is responsible for managing the growing internal security challenges for the NTT...

Programs for Women & Veterans in Cyber w/ WiCyS - SPECIAL EDITION

26 Apr 2021

Contributed by Lukas

With us today are Lynn Dohm, Executive Director of Women in Cybersecurty (WiCyS) and Martha Laughman, Veterans Iniative Lead at WiCyS and Director o...

Data Risk Governance w/ Patrick Benoit

21 Apr 2021

Contributed by Lukas

Howdy, y’all, and welcome to The Cyber Ranch Podcast! With us today is Patrick Benoit, Global Head of Cyber GRC, and BISO at CBRE. Patrick is he...

Vishing, Smishing and STIR/SHAKEN w/ Mike Manrod

14 Apr 2021

Contributed by Lukas

Welcome to The Cyber Ranch Podcast, recorded under the big blue skies of Texas, where one CISO explores the cybersecurity landscape with the help of...

Maturing Purple Teaming w/ Gabe Lawrence

07 Apr 2021

Contributed by Lukas

Welcome to The Cyber Ranch Podcast, recorded under the big blue skies of Texas, where one CISO explores the cybersecurity landscape with the help of...

Interview with a Vendor w/ Dutch Schwartz

31 Mar 2021

Contributed by Lukas

In this episode, host and CISO Allan Alford interviews his friend Dutch Schwartz, Principal Security Specialist at Amazon Web Services. Dutch is a v...

Advancing Cybersecurity Careers w/ Christophe Foulon

24 Mar 2021

Contributed by Lukas

In this episode, host and CISO Allan Alford interviews his friend Chris Foulon, Sr. Manager of Cybersecurity at a leading fintech compnay, and co-ho...

Developing Leadership w/ Gary Hayslip

17 Mar 2021

Contributed by Lukas

Today, host and CISO Allan Alford interviews friend and fellow CISO Gary Hayslip. Besides being a brilliant business leader, Gary is an author, men...

The Post-COVID Reckoning w/ Dr. Rebecca Wynn - SPECIAL EDITION

15 Mar 2021

Contributed by Lukas

In this show, host Allan Alford interviews Dr. Rebecca Wynn about information security decisions made during COVID and what the 2021 "reckoning" mig...

Business-Oriented Security w/ Chris Castaldo

10 Mar 2021

Contributed by Lukas

In this show, host Allan Alford interviews his friend Chris Castaldo about how to align information security with the business. Chris is the CISO at...

Supply Chain Security w/ Omkhar Arasaratnam

03 Mar 2021

Contributed by Lukas

Today, host and CISO Allan Alford interviews Omkhar Arasaratnam, a veteran of the cybersecurity industry, on the topic of supply chain security. Wi...

Startups & VCs in InfoSec w/ Will Lin

24 Feb 2021

Contributed by Lukas

In this show, host Allan Alford interviews his friend Will Lin about startups and venture capital. Will Lin is a venture capitalist with ForgePoint ...