CISO, vCISO, and the unexpected benefits of storytelling

Security Masterminds

In this week's episode, we speak with industry veteran and self-described recovering CISO Thom Langford.
We discuss how Thom got into cybersecurity and became a CISO. Whether a CISO needs to be technical or not, and what differentiates a conventional CISO from a virtual CISO.
Thom also explained the benefits of storytelling, the use of videos humor, and how to influence security culture.
We also hear about Thom's biggest security mistake.
Show Links

• KnowBe4 website - https://blog.knowbe4.com
• LinkedIn
  • Thom Langford - https://www.linkedin.com/in/thomlangford/
  • Erich Kron - https://www.linkedin.com/in/erichkron/
  • Jelle Wieringa - https://www.linkedin.com/in/jellewieringa/
  • James McQuiggan - https://www.linkedin.com/in/jmcquiggan/
• ZX 81 (pronounced Zed-X) - https://en.wikipedia.org/wiki/ZX81
• ZX Spectrum (pronounced Zed-X) - https://en.wikipedia.org/wiki/ZX_Spectrum
• Host Unknown Videos - https://www.youtube.com/user/HostUnknownTV
  • Lost all the Money, Accept the Risk
• Tom’s vCISO Blog - https://thomlangford.com/2019/02/25/opening-a-new-door-of-opportunity
• Seagull Management - https://en.wikipedia.org/wiki/Seagull_management
• Wheaton’s Law - http://www.wheatonslaw.com

Luvut

1. Introduction (00:00:00)

2. Getting into Cybersecurity (00:01:21)

3. CISO at Technical Role or Management Role? (00:03:51)

4. Videos & Public Speaking (00:07:40)

5. Parody Videos - Host Unknown (00:10:33)

6. Biggest Mistake & Lesson Learned (00:14:17)

7. vCISO vs CISO (00:18:48)

8. Biggest Threat in next Decade (00:22:28)

9. Beneficial CISO Skills (00:24:22)

10. CISO Impacts Culture (00:27:25)

11. Storytelling (00:31:18)

12. Final Thoughts (00:34:21)

13. How to find Thom Langford (00:36:26)