CISO Insights: Voices in Cybersecurity

Traditional annual compliance training often fails to prepare organizations for chaotic, high-pressure cyber incidents. Incident Response (IR) "Game Day" exercises and tabletop drills simulate live ransomware attacks, deepfake executive requests, and supply chain breaches in a controlled environment. This episode breaks down how to design realistic tabletop scenarios that test communication trees, decision velocity, and cross-department coordination between IT, Legal, and Communications.

Week 2 Bonus Code: ' CALLBACK ' 

Week 3 Bonus Code: ' PASSKEYS '

Week 1 + 2 Contest/Skills winner is William W, for a tabletop called “Deepfake CFO Call.” A treasury team gets a Teams call from their CFO, on camera, asking for a $1.86 million wire. It isn’t her. The attacker reset her MFA weeks earlier with a cloned voice. It scored 90 out of 100. Congrats, William. https://tabletopsec.com/ 

Week three is open now, and the theme is identity and passkeys. The prize is a Nitrokey 3 plus $50 in CISO Marketplace credit. Your first submission adds 25 entries to the NitroPhone draw, and code PASSKEYS adds three more at https://cyberaware.win/c/PASSKEYS Entries close October 31st.

Buy Nitrokey direct: https://securitygadgets.shop/nitrokey 

Enter free: https://cyberaware.win
Bonus entries (+25 for your first submission): https://cyberaware.win/community
No purchase necessary. Rules: https://cyberaware.win/rules
Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/
#CyberAwareWin #CybersecurityAwarenessMonth

As traditional network boundaries dissolve, enterprise security relies entirely on identity verification, cryptographic credentials, and continuous human risk management. This Week 2 capstone episode synthesizes passkey adoption, machine identity governance, and Shadow AI guardrails into a cohesive Identity-First Zero Trust architecture. Listeners will learn how to leverage these identity controls as a launchpad for Week 3's focus on Incident Response Game Day and active threat containment.

Week 2 Bonus Code: ' CALLBACK ' 

🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31
Enter free: https://cyberaware.win
Bonus entries (+25 for your first submission): https://cyberaware.win/community
Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights
20% off across CISO Marketplace with code CYBERAWARE26
No purchase necessary. Rules: https://cyberaware.win/rules
Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/
#CyberAwareWin #CybersecurityAwarenessMonth

Even when attackers successfully impersonate executives or hijack legitimate communication accounts, robust procedural controls can halt unauthorized transactions. Dual authorization mandates that high-risk actions—such as modifying supplier bank accounts or executing large wire transfers—require independent approval from two separate personnel. This episode provides step-by-step guidance for building resilient financial workflows that withstand synthetic social engineering and executive impersonation.

 

Week 2 Bonus Code: ' CALLBACK ' 

🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31
Enter free: https://cyberaware.win
Bonus entries (+25 for your first submission): https://cyberaware.win/community
Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights
20% off across CISO Marketplace with code CYBERAWARE26
No purchase necessary. Rules: https://cyberaware.win/rules
Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/
#CyberAwareWin #CybersecurityAwarenessMonth

Modern infostealers bypass initial multi-factor authentication by stealing active browser session cookies, allowing adversaries to hijack authenticated cloud sessions. To neutralize session theft, emerging standards like Device Bound Session Credentials (DBSC) cryptographically pair SaaS session tokens to the endpoint hardware's Trusted Platform Module (TPM). This episode explains how hardware-bound session tokens prevent stolen cookies from functioning on attacker devices, closing the gap in post-authentication defense.

Week 2 Bonus Code: ' CALLBACK ' 

🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31
Enter free: https://cyberaware.win
Bonus entries (+25 for your first submission): https://cyberaware.win/community
Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights
20% off across CISO Marketplace with code CYBERAWARE26
No purchase necessary. Rules: https://cyberaware.win/rules
Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/
#CyberAwareWin #CybersecurityAwarenessMonth

While enterprise teams adopt AI tools to boost productivity, inserting corporate IP, customer PII, or proprietary code into unvetted public LLMs creates severe data leakage risks. Shadow AI risk management requires visibility into unauthorized AI tool usage without stifling employee efficiency or creativity. This episode establishes practical guidelines for local prompt scrubbing, safe AI usage policies, and selecting enterprise-grade AI platforms with guaranteed data privacy.

 

Week 2 Bonus Code: ' CALLBACK ' 

🎁 Cybersecurity Awareness Month Giveaway — Oct 1–31
Enter free: https://cyberaware.win
Bonus entries (+25 for your first submission): https://cyberaware.win/community
Grand prize: NitroPhone 5a · Drawn Nov 5, live on CISO Insights
20% off across CISO Marketplace with code CYBERAWARE26
No purchase necessary. Rules: https://cyberaware.win/rules
Full October schedule + all episodes: https://cisoinsights.show/security-awareness-2026/
#CyberAwareWin #CybersecurityAwarenessMonth